Privacy

Release Desk is a Shopify embedded app for reviewing fulfillment exceptions before they ship. It reads fulfillment orders and order edit events through the Admin GraphQL API.

Data we process

• Shop domain, IANA timezone, and install or uninstall timestamps
• Fulfillment order IDs, hold IDs, hold reasons, and location names
• Order names and customer display names shown in the review queue
• Cancel-request signals from the Admin events query (action:requested_edit_requested subject_type:ORDER), stored only when the event message indicates a cancellation

What we do not do

• We do not receive a customer-cancel webhook. Cancel intake is polled, not pushed.
• We do not complete cancels with refundCreate.
• We do not request assigned-fulfillment-order, theme, checkout, or inventory-write scopes.

Retention and GDPR

Sessions are deleted on app/uninstalled. We honor customers/data_request, customers/redact, and shop/redact. After a shop redact we delete that shop's install row, cancel intake, and webhook receipts.

Contact the app operator through your Shopify Partner listing once the app is published.