Payment Rules – Privacy Policy

Payment Rules ("the App") lets merchants who use Shopify to power their stores hide, sort and rename payment methods at checkout using rules ("the Service"). This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store. Last updated: October 2026.

Personal information the App collects

When you install the App, we are automatically able to access certain types of information from your Shopify account:

• Payment customizations (read_payment_customizations, write_payment_customizations) – to install the App's checkout function in your store.
• Your rules – rule name, action, the payment methods they target and the conditions you choose (for example cart total, country, currency, shipping method or schedule).
• Checkout context, not stored – while a customer is in checkout, Shopify runs the App's function with the cart total, destination country, currency and similar values so your rules can apply. This runs inside Shopify; the App does not receive or store it.
• Store and session data – your myshopify domain, the API tokens Shopify issues to the App, and the name and email of the staff member who opens the App.
• Plan – billing is handled by Shopify; the App only stores the plan name and status.
• Support messages – if you write to us through the in-app support chat, your message, the store domain, store name and contact email are stored so we can answer.

The App does not read, store or process any personal data of your customers.

How do we use your personal information?

We use the information only to provide the Service and to operate the App, and to answer your support requests. We do not use it for advertising and do not sell it.

Service emails to merchants

After an install we send the store's contact email a few short service emails about the App: a welcome with the first setup step, one request for an App Store review after a week (with at most one reminder) and, after an uninstall, one question about what was missing. For this we use the store's contact email, store name, country and the install and uninstall dates provided by Shopify. Legal basis: our legitimate interest in looking after our merchants (Art. 6(1)(f) GDPR, § 7(3) UWG). Every email has an unsubscribe link; after unsubscribing we send no further emails of this kind.

Sharing your personal information

We share personal information only with these service providers:

• Fly.io – hosting of the App and its database, region Frankfurt, Germany (EU).
• Brevo (Sendinblue SAS, France, EU) – sending the service emails to merchants described above.
• Shopify – the App runs inside Shopify and reads and writes data through the Shopify API.

Finally, we may also share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Your rights

If you are a European resident, you have the right to access the personal information we hold about you and to ask that it be corrected, updated, or deleted, as well as the right to restriction, data portability, objection, and to lodge a complaint with a supervisory authority. We process the information to fulfil our contract with the merchant. The data is stored in the EU.

Data retention

We keep the data for as long as the App is installed. When you uninstall the App, your rules and sessions are deleted immediately, and the remaining store data is deleted when Shopify sends the shop redaction request (48 hours after uninstalling). You can request deletion at any time via the contact below.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at hello@monetais.de or by mail: Appsentials, Luis Benz, Comeniusstr. 4, 01307 Dresden, Germany.