Privacy policy
Who we are
DueBack is a Shopify app made by Miso Apps. It lets a Shopify store rent out products by date, take deposits, and track returns. This policy explains what DueBack stores when a store installs it, and why.
What we store
About the store: the shop domain, store name, store email, timezone, currency, the plan you chose, and the settings you save in DueBack (rental rules, deposits, late fees, email settings and your rental agreement).
About rentals: for each order with a rental, the order and line item ids, the product and variant, rental dates, status, deposit, fees and the agreement version accepted at checkout. DueBack also keeps a history of every status and money change on a booking.
About customers: the customer id, name and email from the order. DueBack needs the name and email to send return reminders and deposit refund summaries for the store.
Return photos that store staff upload while inspecting a returned item.
Shopify access tokens, so DueBack can act for the store through the Shopify Admin API.
DueBack does not store payment card details. Payments, deposits and refunds are handled by Shopify.
How we use it
Only to run DueBack for the store: checking availability, reserving dates, showing bookings, sending the emails the store turned on, settling deposits, and billing the store's plan through Shopify. We do not sell data, use it for advertising, or share it with other stores.
Where it is kept
On Cloudflare (D1 database, R2 storage and Workers KV), encrypted at rest and in transit. Emails go out through our own mail service. Shopify processes the store's orders and payments under its own privacy policy.
How long we keep it
While the app is installed. When a store uninstalls DueBack, Shopify sends a request 48 hours later and we then delete everything we hold for that store, including photos.
When Shopify passes on a customer's request to delete their data, we remove the customer's name and email from their bookings. When a customer asks for their data, we email the store owner a copy of what DueBack holds so the store can answer them.
Your rights
Customers should contact the store they rented from; the store is responsible for their data, and DueBack processes it for the store. Store owners can ask us for a copy of their data or for its deletion at any time: email hi@misoapps.com or use the chat inside DueBack.
Changes
We will update this page when what we store or how we use it changes, and change the date at the top.