PriceFrame Privacy Policy & GDPR Compliance

1. Introduction

Welcome to PriceFrame ("we," "our," or "us"). We are committed to protecting your privacy and handling your data responsibly. This Privacy Policy explains how we collect, use, and safeguard information when you use the PriceFrame Shopify app.

PriceFrame is a read-only administrative tool that helps merchants generate wholesale price lists in PDF and CSV formats.

2. Information we collect

We collect only the information necessary to provide the app's functionality.

Store information

• Shopify store domain
• Store name
• Store contact email

Product & pricing data

• Product titles
• Variant titles and SKUs
• Retail and compare-at prices
• Inventory visibility status (for export filtering)

⚠️ Cost per item is accessed only for internal calculations and is never included in exports.

Price list configuration data

• Saved price lists (selected products/variants)
• Pricing rules (discounts, base price selection)
• Export configuration settings (columns, layout, branding)
• Generated shareable export links

Usage data

• App usage statistics (e.g. number of price lists, exports generated)
• Feature usage for product improvement

Subscription & billing data

• Subscription plan status
• Billing events

(All billing is processed by Shopify; we do not store payment details.)

Technical data

• Error logs and performance metrics (anonymized)

3. How we use your information

We use collected data to:

• Provide and operate PriceFrame's core features
• Generate wholesale price lists (PDF and CSV)
• Save and manage reusable price lists
• Generate auto-updating shareable links
• Process subscriptions and billing through Shopify
• Monitor performance and improve reliability
• Provide customer support
• Comply with legal and regulatory obligations

4. Data storage and security

Data storage

• Product and pricing data is stored only as required to maintain saved price lists
• Exported files are generated on demand
• Shareable links reflect live data and settings

Security measures

• All data transmission is encrypted via HTTPS
• Authentication is handled via Shopify OAuth
• Access is limited to authorized systems only

We do not access or modify storefront content.

5. GDPR compliance (EU & EEA users)

If you are located in the European Economic Area (EEA), you have the following rights under GDPR:

• Right to access – request a copy of your data
• Right to rectification – correct inaccurate data
• Right to erasure – request deletion of your data
• Right to data portability – receive your data in a portable format
• Right to object – object to data processing
• Right to restrict processing – limit how your data is used

To exercise these rights, contact us at: support@bullmooseapps.com

6. Data retention

We retain data only for as long as the app is installed and in use:

• Price lists and settings: retained while the app is installed
• Usage data: retained while the app is active
• Error logs: retained for up to 90 days

When you uninstall PriceFrame, all associated store data is permanently deleted within 48 hours.

7. Third-party services

We use the following third-party services:

• Shopify – app hosting, authentication, and billing (Shopify's Privacy Policy applies)
• Error monitoring tools (e.g. Sentry) – used for anonymized error tracking and performance monitoring

We do not sell or share your data with third parties for marketing purposes.

8. Cookies

PriceFrame uses essential cookies required for:

• Authentication
• Session management

These cookies are necessary for the app to function and cannot be disabled.

9. Your rights

You have the right to:

• Uninstall the app at any time
• Request access to the data we hold about your store
• Request deletion of your data
• Contact support regarding privacy concerns

10. Children's privacy

PriceFrame is not intended for use by individuals under the age of 13. We do not knowingly collect personal data from children.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or within the app.

12. Contact us

13. Data Processing Agreement (GDPR)

For EU merchants: you are the Data Controller and we act as a Data Processor on your behalf. We:

• Process data only as instructed by you
• Implement appropriate technical and organizational safeguards
• Do not transfer data outside the EEA without adequate protections
• Assist with data subject requests
• Delete or return data upon request or app uninstallation

This Privacy Policy complies with GDPR, CCPA, and Shopify App Store requirements.