Privacy Policy

This policy covers:

• Merchants who install and use Rental Suite on Shopify
• Data that flows through Shopify APIs, webhooks, app proxy routes, and our app database
• Messages you send us for support or account help

Shopify handles its own platform data under Shopify's privacy policy. That is separate from this page.

Rental Suite asks for Shopify API scopes that match what the app actually does. Here is what the main groups are for:

We do not request broad marketing scopes beyond what rental operations and notifications need.

Shop & installation

• Shop domain
• OAuth session details (scopes, token expiry, Shopify user/account metadata)
• Whether you finished in-app onboarding
• Billing plan and product-cap usage

Products, inventory & bookings

• Linked product profiles (modes, rates, availability, SKU)
• Inventory, serial units, holds, and location settings
• Bookings, inquiries, subscriptions, waitlists, and purchase leads
• Promotion codes and review content you manage in-app

Storefront & checkout helpers

• Availability and quote requests served through the app proxy
• Optional cart / payment hold identifiers tied to a checkout session

Email & notifications

• Recipient addresses from Shopify or booking/inquiry records when templates send
• Template content you customize and send status for operational emails

We do not sell email open or click tracking as a marketing product.

Website forms & chat

• The IP address and country a website form or chat message was sent from (see section 5)

We use this data to run the app, for example:

• Log you in and secure app proxy requests
• Power storefront rentals, bookings, inventory, and subscriptions
• Show dashboard metrics for your shop
• Send booking and inquiry emails you configure
• Respond to Shopify privacy webhooks when required

We do not sell merchant or customer data.

This section covers messages you send us through our website, rentalsuite.developerlook.com. When you send a form on the website (a contact message, a documentation support request or a newsletter sign-up) or write to us through the chat widget, we record the IP address your request came from and the country that address points to. The country is read from the IP address by Cloudflare, our hosting and security provider, as the request reaches us, so your address is not sent to any other lookup service. We store the IP address and country with your submission in our content management system and in our customer relationship management (CRM) system, next to the details you gave us.

We use them to see which country you are writing from so we can reply at a sensible time, to group our contacts by country so the follow-ups and offers we send fit your region, and to detect spam and abuse. We rely on our legitimate interests in running and growing our business, and where the law requires your consent for marketing emails, we ask for it first. You can unsubscribe from marketing at any time.

We keep your IP address and country for as long as we keep the rest of your record in our CRM: until you ask us to delete your data, or until the record is no longer needed for these purposes. To get a copy of this information, correct it or have it deleted, use the contact details at the end of this page.

Data may go to:

• Shopify (APIs and webhooks, required for the app to work)
• Hosting, database, email, and monitoring providers that help us operate the service
• Cloudflare, which hosts and protects our website and tells us which country a form or chat message came from
• Authorities if the law requires it

We do not rent or sell data to ad networks.

We keep data while your shop uses Rental Suite and as long as we need it for security, billing disputes, or legal requirements.

Shopify compliance webhooks also trigger deletion:

• customers/redact. removes customer-linked rental records for that shop where required
• shop/redact. removes shop data across sessions, products, bookings, and related tables
• app/uninstalled. clears session/onboarding data and unlinks app resources where applicable

We use measures such as:

• App Proxy signature checks on storefront requests
• Validation on IDs and event payloads
• HTTPS in production
• Access controls and logging for operations

No system is 100% secure, but we treat security as ongoing work.

Where privacy law applies, we rely on:

• Performing our contract with you (running the app)
• Legitimate interests (security, fraud prevention, improving the product)
• Legal obligations (including Shopify webhook requirements)
• Consent when the law requires it

Depending on where you are, you may have rights to access, correct, delete, or export personal data, or to object to certain processing.

Shopify App Store apps also honor Shopify's mandatory webhooks: customers/data_request, customers/redact, and shop/redact.

Our infrastructure may process data in countries other than yours. When required, we use appropriate safeguards for cross-border transfers.

We update this policy when the app or legal requirements change. The date at the top of the page is the latest revision.

Privacy questions or requests:

• Email[email protected]
• Support[email protected]
• CompanyDeveloperLook
• LocationSheridan, Wyoming, United States