Vaultd Privacy Policy
Vaultd (“we,” “our,” or “us”) is committed to protecting the privacy of merchants who use our Shopify application and the customers who interact with our services. This Privacy Policy outlines how we collect, use, and disclose personal data.
Information We Collect
As a Shopify App, Vaultd accesses data via the Shopify API and through user interactions:
Merchant Data
Shop name, shop email, shop domain, and plan details to manage your Vaultd account. If you create a Vaultd account password (for linking multiple stores), it is stored as a one-way hash — we never store plain-text passwords.
Customer & Drop Data
For the purpose of providing waitlists, referrals, and live analytics, we collect customer email addresses (when they sign up for a waitlist), traffic referral sources, and anonymized interaction data (conversion rates, sales velocity).
Security Data
IP addresses and, when a merchant enables Cloudflare Turnstile bot protection, device signals processed by Cloudflare — solely for the purpose of bot protection and preventing scalping.
How We Use Your Information
We use the collected information to:
- +Provide, operate, and maintain the Vaultd platform.
- +Process and manage pre-launch waitlists and referral loops.
- +Generate real-time analytics and post-drop performance charts for merchants.
- +Protect store inventory against automated bot attacks.
- +Process subscription billing through Shopify.
Data Sharing and Third Parties
We do not sell personal data. We only share information with third-party service providers strictly necessary to run our app — Shopify (store sessions and billing subscriptions, governed by Shopify’s own privacy policy), Resend (email delivery to your customers), and Cloudflare Turnstile (bot protection, when enabled) — or when required by law.
Data Retention
We retain customer data (like waitlist emails) only for as long as necessary to fulfill the services requested by the merchant. Merchants can request data deletion at any time. When you uninstall Vaultd, Shopify’s mandatory data redaction process automatically triggers permanent deletion of your store’s data 48 hours after uninstallation.
GDPR & CCPA Compliance
If you or your customers are located in the EU or California, you have the right to access, correct, or delete your personal data. Vaultd complies with Shopify’s mandatory privacy webhooks to automatically process deletion requests.
Cookies and Tracking
The Vaultd dashboard (embedded in Shopify admin) does not use any analytics cookies or third-party tracking pixels. The storefront widgets (countdown, social proof, waitlist form) make API calls to our servers to load drop data but do not set cookies on your customers’ browsers.
Children’s Privacy
Vaultd is a business-to-business service intended for Shopify merchants. We do not knowingly collect personal information from individuals under 16 years of age. The app is not directed at consumers and should not be used to collect data from minors.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the Vaultd app or by email. Continued use of Vaultd after a policy update constitutes acceptance of the revised terms.
Contact Us
If you have any questions about this Privacy Policy, please contact us at: