Privacy Policy

FormGatekeeper ("we," "our," or "us") is a Shopify application that helps merchants collect and manage customer applications. This Privacy Policy explains how we collect, use, and protect information when you use our app.

1. Information we collect

FormGatekeeper collects information that applicants submit through merchant-created forms. This may include:

• Name (first and last)
• Email address
• Phone number
• Business name
• Mailing address
• Tax ID or seller's permit
• Any other fields the merchant has added to their form

We also collect standard usage data such as the merchant's Shopify store domain and access tokens required to operate the app.

2. How we use information

We use collected information to:

• Display application submissions to the merchant inside the FormGatekeeper dashboard
• Create or update customer records in the merchant's Shopify store
• Apply customer tags in Shopify based on application status (pending, approved, denied)
• Send email notifications to merchants when new applications are submitted
• Send approval or denial emails to applicants on the merchant's behalf

3. Data storage

Application data is stored in a secure PostgreSQL database hosted on Railway. Data is associated with the merchant's Shopify store and is not shared between stores. We retain submission data for as long as the merchant's store has the app installed.

4. Third-party services

FormGatekeeper uses the following third-party services:

• Shopify — to authenticate merchants and read/write customer data via the Shopify Admin API
• Resend — to send transactional emails (new submission alerts, approval and denial notifications)
• Railway — to host the application server and database

Each of these providers has their own privacy policy governing how they handle data.

5. Data sharing

We do not sell, rent, or share applicant data with any third parties beyond what is necessary to operate the app (Shopify, Resend, and Railway as described above). We do not use applicant data for advertising or marketing purposes.

6. Merchant responsibilities

Merchants using FormGatekeeper are responsible for informing their customers about how their data will be collected and used, in accordance with applicable privacy laws including GDPR and CCPA. Merchants should update their own store's privacy policy to reflect the use of FormGatekeeper.

7. Data deletion

Merchants can delete individual submissions from within the FormGatekeeper dashboard at any time. When a merchant uninstalls the app, they may contact us to request deletion of all associated data.

8. Applicant rights

If you are an applicant and wish to request access to, correction of, or deletion of your data, please contact the merchant who operates the store where you submitted your application. You may also contact us directly and we will assist in coordinating with the merchant.

9. Security

We use industry-standard security practices including HTTPS, encrypted database connections, and OAuth 2.0 for Shopify authentication. However, no system is completely secure and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, please contact us at:
hello@formgatekeeper.com