Kumiki Reorder Reminder プライバシーポリシー

English

Kumiki Reorder Reminder (“the App”, “we”, “us”) is a Shopify app operated by BLANKS WORK (https://blanks.work). This policy explains what information the App collects and processes, why, how long it is kept, and who it is shared with. It applies to merchants who install the App (“Merchants”) and to customers of those stores who see the App’s block in their customer account (“Customers”).

1. What the App does

The App shows a block in a store’s customer account pages (profile, orders, and order status). The block lists products that a signed-in Customer bought before and may need again soon, with a button that adds the same product variant and quantity to the cart. The App also shows Merchants how many orders were placed through that button.

2. Information we collect and process

2.1 Merchant and store information (stored)

When a Merchant installs and uses the App, we store:

• The store’s myshopify.com domain and Shopify store ID
• The store’s time zone and currency
• Installation and uninstallation dates
• Subscription status for the App (for example, active or inactive, and the plan name), as reported by Shopify
• App settings the Merchant saves (default reorder cycle, how many days early to show reminders, maximum number of items, out-of-stock behavior) and onboarding checklist status
• Shopify API access tokens and refresh tokens for the store. These are encrypted with AES-256-GCM before they are stored.

We do not store the names, email addresses, or other personal information of the Merchant’s staff. The App uses store-level (“offline”) access only.

2.2 Order information (processed temporarily, not stored)

To show Merchants the results of the reorder button, our server reads the store’s orders from the last 30 days through the Shopify Admin API. For each order, it reads only:

• The order’s creation date and cancellation date
• For each line item: whether it carries the App’s hidden marker, its current quantity, and its original unit price

We use this information only to calculate daily totals. We store only those daily totals: the date, the number of orders placed through the reorder button, the total item amount, and the currency. We do not store order IDs, line items, or any information about Customers.

We do not read Customers’ names, email addresses, phone numbers, or addresses.

2.3 Customer information in the customer account (processed in the Customer’s browser only)

When a signed-in Customer opens their customer account, the App’s block runs in the Customer’s browser. It reads that Customer’s own recent orders (up to 20 orders from the last 60 days: products, variants, quantities, and order dates) and current product information (availability, price, image, and the reorder cycle set by the Merchant) from Shopify.

This information is used only to decide which products to show in the block. It is not sent to our servers, and we do not store it. The block does not read the Customer’s name, email address, phone number, or address.

2.4 Hidden cart marker

When a Customer uses the reorder button, the App adds a hidden line item property, _reorder_reminder with the value 1, to the cart. If the Customer places the order, this property becomes part of the order in the Merchant’s Shopify store. It contains no personal information. It lets the Merchant and the App count orders placed through the button.

2.5 Technical logs

Our hosting provider (Google Cloud) automatically records request logs when the App’s server receives requests, for example from a Merchant’s browser while they use the App in the Shopify admin, or from Shopify webhooks. These logs can include the IP address, browser user agent, request time, and requested URL. Our own application logs record operational events (for example, the store’s domain, errors, and processing times). We designed them to exclude access tokens and other secrets, as well as Customer personal information.

3. How we use information

We use the information above only to:

• Provide the App’s features to the Merchant and to the Merchant’s Customers
• Confirm the Merchant’s subscription to the App through Shopify
• Calculate and display the results of the reorder button
• Secure, maintain, and troubleshoot the App, and respond to support requests

We do not sell information, and we do not use it for advertising or profiling. We do not make automated decisions that have legal or similarly significant effects on anyone.

4. Retention and deletion

• Daily totals: only the most recent 30 days are kept. Each recalculation replaces the previous totals.
• Access tokens: deleted when the Merchant uninstalls the App.
• All store data: deleted when we receive Shopify’s shop/redact request, which Shopify sends about 48 hours after the App is uninstalled.
• Customer data requests: we do not store information linked to individual Customers. When Shopify sends a customers/data_request or customers/redact request, we record that we received it and confirm that we hold no matching data.
• Logs: kept for 30 days, then deleted automatically.
• Temporary order processing (section 2.2): the order file is processed as it is read and is not saved.

5. Service providers (subprocessors)

We use the following providers to run the App. They process information only on our behalf.

Information is transferred to and processed in the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the providers’ data processing terms and Standard Contractual Clauses. {{TRANSFER_MECHANISM_CONFIRMED}}

We do not share information with any other third party, except where the law requires it.

6. Security

• All connections use TLS encryption.
• The database is encrypted at rest by our database provider.
• Shopify access tokens are additionally encrypted by the App (AES-256-GCM).
• Secrets are stored in Google Cloud Secret Manager.
• Access to production systems is limited to authorized personnel.

7. Cookies

The App runs inside the Shopify admin and uses Shopify session tokens. It does not set advertising or tracking cookies. The customer account block does not set cookies.

8. Your rights

Merchants can ask us to access, correct, or delete the information we hold about their store by contacting us at {{CONTACT_EMAIL}}. Customers should contact the store they purchased from; Shopify forwards Customer privacy requests to us, and we respond to them as described in section 4. We respond to requests within 30 days.

Depending on where you live (for example, in the European Economic Area, the United Kingdom, California, or Japan), you may have additional rights under local law, such as the right to object to processing or to complain to a data protection authority.

9. Children

The App is intended for businesses. We do not knowingly collect information from children.

10. Changes to this policy

If we change this policy, we will update the “Last updated” date above. If the change is significant, we will also notify Merchants in the App or by email. For example, we plan to move the database from Neon to Google Cloud SQL (United States, us-central1) in the future. We will update section 5 when that happens.

11. Contact

• BLANKS WORK
• https://blanks.work
• Contact form: https://blanks.work/contact/