Privacy policy

Owed: Net Terms & Collections · Last updated: 3 October 2026 (v1.0.1)

This policy explains what data the Owed app ("the app"), published by Nudge4 ("we", "us"), handles when a merchant installs it on a Shopify store. The merchant is the controller of their customers' data. We process it only on the merchant's instructions to provide the app.

Data the app reads from Shopify

With the permissions the merchant approves at installation, the app reads from Shopify:

• unpaid orders (order number, dates, amounts, outstanding balance, PO number and payment terms)
• which B2B company (company name) or customer (Shopify customer ID only) each order belongs to
• the store's name, contact email, address, currency and time zone, for statements and dates
• fulfillment orders of newly created orders, so the overdue guard can place a hold

This information is read live from Shopify each time a page is opened or a reminder is due. The app does not request or store customers' names, email addresses or addresses. Reminder emails are addressed and sent by Shopify itself, using the email already on the order.

Data the app stores

• The store's domain and the access token Shopify issues to the app (needed to call Shopify's API).
• The merchant's settings (reminder schedule, message text, guard settings).
• A reminder log: Shopify order ID, due date, schedule step, status and time. This prevents duplicate reminders.
• A hold log: Shopify order and fulfillment order IDs, account ID and days overdue for holds the app placed.
• Basic usage events without personal data (for example "statement downloaded").

How data is used

Only to provide the app's features: showing balances and aging, generating statements, sending payment reminders, placing fulfillment holds and recording payments. Reminder emails are sent by Shopify (the order invoice email) from the merchant's store. We don't sell data, use it for advertising, or share it with third parties, except the service providers below.

Where data is processed

• Shopify: the source of all store data, and the sender of reminder emails.
• Render (Render Services, Inc.): hosts the app server and its PostgreSQL database in the United States. All connections use HTTPS/TLS.

Retention and deletion

• When the app is uninstalled, all data stored for the store is deleted immediately. Shopify's shop/redact request is also honoured.
• When Shopify sends a customers/redact request, reminder and hold log entries for that customer's orders are deleted.
• For customers/data_request: the app stores no personal customer data beyond Shopify order IDs, which the merchant already has in Shopify.

Security

Access to the hosting account and database is limited to the developer and protected with strong passwords and two-factor authentication. Secrets are kept in the host's encrypted environment settings, never in source code. The app requests only the Shopify permissions its features need.

Your rights

Merchants can request access to or deletion of their store's data by emailing us. Customers of a merchant should contact that merchant, who controls their data. We'll help the merchant respond.

Changes

We'll update this page if the app's data handling changes, and change the date above.

Contact

Nudge4 · Email: nudge4.support@gmail.com · Support page