Privacy Policy
This policy explains how DivineShield, operated by Le Quang Tay handles information when merchants use the service.
Effective date: August 17, 2026
Data we process
Depending on the features integrated and used, service data may include merchant workspace and membership details, shop domains and installation status, Shopify installation authorization data, store-pair configuration, product and variant catalog data used for mapping, minimal cart-line mapping data, operational order references and statuses, service logs, and privacy or support communications.
Purpose and lawful operation
We use this information to authenticate installations, connect Source and Target shops, synchronize catalogs, transform supported carts, correlate resulting orders, secure and troubleshoot the service, respond to support and privacy requests, and meet legal obligations.
Data minimization
Our data minimization approach limits collection to information reasonably needed for the service. DivineShield is designed not to retain customer names, email addresses, phone numbers, or raw order payloads for routine cart and order correlation. Cart snapshots are limited to mapping-required line data.
Retention, deletion, and compliance requests
Operational data is retained only while reasonably needed to provide, protect, or document the service, subject to legal obligations and backup cycles. Privacy requests are handled through Shopify-prescribed processes and compliance webhooks. When an uninstall webhook is received, stored authorization credentials are immediately disabled, the store is marked uninstalled, and cart routing pairs are deactivated. Customer data requests and redactions are processed automatically via webhook with zero customer PII retained. Shop redactions permanently redact store catalog and credential records 48 hours after uninstall. Merchants may also contact us to request account deletion; limited non-identifying records may need to remain where law or legitimate security needs require them.
Sharing and processors
Information may be processed by Shopify and hosting, database, monitoring, or communications providers needed to operate the service. We do not sell personal information. We may disclose information when required by law or to protect users and the service.
Security
Our security approach starts with data minimization. Shopify offline access credentials are encrypted at rest using AES-256-GCM authenticated encryption with per-record initialization vectors and authentication tags. Administrative access requires secure session digests and CSRF protection. No online service can promise perfect security, so merchants should also protect their Shopify accounts and promptly report concerns.
Contact and privacy requests
For access, deletion, correction, or other privacy questions, contact anna.cs.support@gmail.com. We may need to verify the requesting merchant and affected shop before acting.