Privacy policy
Last updated October 15, 2026
Dropflock is a Shopify app made by Packsaddle Software, LLC ("we", "us"). It lowers a product's price after people buy it and pays earlier buyers the difference. This policy explains what data the app handles for the stores that install it and for their shoppers.
What we collect
- Store details: the store's Shopify domain and ID, currency, time zone, and the access token Shopify issues when the app is installed.
- Order details, for orders that could count toward a campaign: order ID and number, line items (product, variant, quantity, price paid), discounts, financial status, cancellations and refunds, and the Shopify customer ID on the order.
- Campaign settings the merchant chooses, and the payouts the app makes.
We do not collect or store shoppers' names, email addresses, phone numbers or postal addresses. We use the Shopify customer ID only so a store-credit payout reaches the buyer who placed the order. Shopify, not Dropflock, sends the shopper any refund or store-credit notification.
Share links carry a short random reference so a merchant can see how many orders came from shares. The reference identifies a share, not a person.
How we use it
- To count real, qualifying orders and show the live count on the store.
- To work out the price each buyer is owed and pay the difference through Shopify.
- To show the merchant their campaign results.
Prices depend only on a campaign's total sales volume, never on any individual shopper's data. We don't sell data, use it for advertising, or build profiles of shoppers.
Where it's stored and who processes it
Data is stored with Cloudflare (Workers, D1 and Durable Objects), encrypted in transit and at rest. Shopify processes orders, refunds and store credit. We use no other processors.
How long we keep it
We keep order and payout records while the app is installed so payouts owed to buyers stay correct. When a store uninstalls, we delete its access tokens right away and all remaining store data when Shopify sends its shop deletion request (48 hours after uninstall). When Shopify asks us to redact a customer, we remove that customer's ID from our records.
Your choices
Merchants can request a copy or deletion of their store's data at any time. Shoppers can ask the store they bought from, or contact us directly. Shopify forwards data and deletion requests to us and we answer them.
Contact
Packsaddle Software, LLC, North Carolina, USA. support@packsaddlesoftware.com
This policy is governed by the laws of the State of North Carolina. If we change it, we'll update the date above.