SplitRight ("the app", "we") is a Shopify app that splits one order into separate orders, by vendor, warehouse or the merchant's own rules, carrying payments, discounts and taxes over exactly. It is provided by Shreyas Labs. This policy explains what information SplitRight collects when a merchant installs it, why, and what we do with it.
Who this covers
Merchants: the store owners and staff who install and use SplitRight.
Shoppers: customers of a store that uses SplitRight. We process shoppers' information only on behalf of the merchant, to split the merchant's orders.
What SplitRight collects and why
From the merchant's store, through Shopify's APIs:
| What | Why | Kept |
|---|---|---|
| The store's domain, plan with SplitRight, and app login session | To run the app and know which features the store's plan includes | While installed, then deleted |
| The split rules and settings the merchant creates (names, conditions, naming, hold, tags, sales-channel and OMS choices) | To decide which orders to split and how | While installed |
| Order details read from Shopify when an order is checked: line items, products, vendors, tags, collections, metafields, cart attributes, prices, discounts, taxes, shipping lines, payment transactions and fulfillment orders | To decide whether and how to split the order, and to carry payments, discounts and taxes over exactly | A working copy of the split plan and money plan: cleared 30 days after the split finishes |
| A record of each order SplitRight checked: order and split order names and IDs, status, the rule used, the skip reason, amounts and the sales channel | The Orders screen, the activity log, retries, undo and support | Orders that weren't split: 90 days. Split orders: 24 months |
| An audit log of each step (no personal data) | To show what happened to each order and to investigate problems | 13 months |
| Monthly split counts | To count usage against the store's plan | 24 months |
About shoppers, only to split the merchant's orders:
| What | Why | Kept |
|---|---|---|
| The Shopify customer ID, customer tags and number of past orders on an order | Rules the merchant sets, such as "don't split for customers tagged VIP", and linking the split orders to the same customer | Not stored separately; the customer ID is kept only as a link on the merchant's split orders in Shopify |
| The shipping and billing address, email and phone on the original order | Copied into the split orders in the merchant's Shopify store, so each split order ships to the same customer | Not stored by SplitRight. Read from Shopify and passed straight into the new orders; every such read is logged (without the details) for security |
| Text a shopper typed that appears in rule matches or line properties (for example an engraving) | To keep personalised items on the right split order | Removed from SplitRight's records when the merchant passes on a deletion request; cleared with the split plan after 30 days anyway |
SplitRight does not store shoppers' names, email addresses, phone numbers, addresses or payment details, never shows them on its own screens or in its CSV export, and never uses customer data for marketing, profiling or anything other than splitting the merchant's orders. Payments are not processed by SplitRight: split orders record each one's share of the payment the shopper already made.
Where data is processed
On Amazon Web Services servers in the United States, with the database on an encrypted disk. Shopify processes store and order data under its own privacy policy.
Sharing
We don't sell or rent personal information. We share it only with:
- Shopify, which hosts the store and the split orders SplitRight creates, and bills the merchant for SplitRight.
- Amazon Web Services, which hosts SplitRight's server and database, under contracts that keep the data confidential.
- Sentry (error monitoring), which receives technical error reports. Personal data is removed before a report leaves our server: no names, emails, phones, addresses, order notes or request contents.
- Authorities, when the law requires it.
Shoppers' rights and requests
Shoppers make privacy requests to the merchant. When a merchant passes on a request through Shopify:
- Access (Shopify's customer data request): we prepare a report of what SplitRight holds about that customer's orders (order IDs and amounts; we hold no contact details) and give it to the merchant.
- Deletion (Shopify's customer redaction): we remove any text that customer entered from SplitRight's records of their orders.
We complete requests within 30 days.
When a merchant uninstalls SplitRight
SplitRight stops checking and splitting the store's orders at once. Orders it already split stay in the merchant's Shopify store. 48 hours after uninstall, Shopify asks us to erase the store's data, and we delete everything SplitRight holds for that store; if that request never arrives, we delete it 30 days after uninstall. Database backups are encrypted and roll off on their own within 30 days. A merchant can ask for deletion sooner at support@shreyaslabs.com.
Security
Data travels encrypted (HTTPS). Access to the database is limited to the people who run SplitRight. Every time SplitRight reads a shopper's contact details from Shopify, it logs that it did so (never the details themselves).
Changes
We'll update this page when SplitRight's handling of data changes and note the date above.
Contact
Shreyas Labs, support@shreyaslabs.com.