Sell-A-Bit — Privacy Policy

Last updated: 9/7/2026

Overview

Sell-A-Bit ("the app") is operated by Misquoth Sundries LLC. This policy explains what data the app collects when a merchant installs it on their Shopify store, and how that data is used, stored, and deleted.

What the app collects

From the merchant's Shopify store, to operate the app:

• The store's domain and an access token issued by Shopify's standard OAuth flow, so the app can make authorized requests on the merchant's behalf. This is infrastructure, not something the app collects separately.
• The name and email address of the staff account that's logged into Shopify admin while using the app (standard information Shopify provides to any embedded app for the session) — this identifies the merchant's own staff member, not a customer.
• Configuration the merchant enters directly: which unit systems and custom units exist, rule-group defaults (product types/products, pricing, presets), and the shop-wide rounding-strategy setting.

Read live from Shopify, not stored by the app:

• Product, variant, and inventory data for products the merchant enables, so the app can display and update pricing/stock.
• Aggregate sales figures (items sold, gross/net sales, discounts, taxes), shown via a link that opens Shopify's own Analytics/Reports page directly — the app builds the link but never runs the query itself or receives the results.

Order data (clean-cart inventory tracking)

For products sold as "clean cart" custom sales, the app needs to know when a specific sale actually completed, so it can deduct the right amount of stock. To do this, it reads completed order data via Shopify's orders/create webhook — specifically the order ID and each line item's title and quantity — and matches it against a record the app created at the moment of sale (product, amount sold, which register rang it up). Once matched, the order data itself is discarded; only the fact that the sale completed and the stock adjustment are kept.

This never includes the customer's name, address, email, or phone number, or any payment/financial information — the app has no use for who placed the order, only what was sold.

What the app does NOT collect

• The customer's (shopper's) name, address, email, or phone number — never read, stored, or used for any purpose.
• No payment or financial information.
• No browsing behavior, analytics, or tracking beyond what's described above.

How data is used

Everything collected is used solely to provide the app's functionality: configuring which products sell by amount, computing correct pricing, updating inventory, and linking out to reporting. Nothing is used for advertising, sold, or shared with third parties.

Where data is stored

Configuration data (rule groups, custom units) and session/auth tokens are stored in the app's own database, hosted by Render. The only order-related data that ever passes through this database is the pending clean-cart records described above (product/amount/register, and — once matched — the completed order's ID) — never the customer's name, address, email, or phone number.

Data retention and deletion

• Uninstalling the app deletes its stored session for that shop.
• Shopify's mandatory shop/redact process (~48 hours after uninstall) triggers deletion of all remaining shop-specific configuration (rule groups, custom units) from the app's database.
• A pending clean-cart record is created at the moment of sale, and kept until either its matching order arrives (marked resolved, not deleted immediately, so there's a record the adjustment was applied) or — for a sale that's voided or abandoned and so never matches an order — it simply sits unresolved. Either way, these records (product/amount/ register, and once resolved, the order ID — never the customer's name, address, email, or phone number) are automatically deleted 30 days after they're created or resolved, whichever applies, and are also removed immediately along with the rest of a shop's data by the shop/redact process described above.
• Because the app never stores the customer's name, address, email, or phone number, there's nothing to delete in response to a customer-specific request — Shopify's customers/redact and customers/data_request webhooks are acknowledged but require no action.

Third parties

The app doesn't share data with any third party. It communicates only with Shopify's own APIs to provide its functionality.

Changes to this policy

If what the app collects or how it's used changes, this page will be updated and the date above revised.

Contact

Questions about this policy or the app's data practices: corvus@misquoth.com.