1. Scope
This Policy applies to these Shopify apps provided by Office Hasegawa (collectively, the “Apps”):
- Inventory Audit
- Metafield Editor
- Inventory Adjuster
- Fraud Detector
- Product Validator
- Returns Manager
The Apps are for Shopify merchants. Each App processes different information; see the app-specific descriptions below.
2. Roles
- Office Hasegawa processes information to authenticate stores, provide app features, retain settings and operation results, secure the Apps, and provide support.
- For information about a merchant’s Shopify store or its buyers, the merchant generally determines the purposes and means of processing. Office Hasegawa processes that information as needed to provide the Apps and follow the merchant’s instructions.
- Buyers should first contact the merchant from whom they purchased.
3. Information processed across the Apps
- Store and authentication data: Shopify store identifier/domain, installation status, granted scopes, Shopify authentication sessions, and Shopify-issued access or refresh tokens. A session may contain the Shopify Admin user’s ID, name, email address, locale, and role information.
- Settings and operations: app-specific settings, saved views, operation results, request times, error categories, and Shopify webhook processing information.
- Support: contact details, messages, and support history sent by merchants.
- Operational logs: information needed to diagnose failures or abuse, such as store identifiers, event types, internal IDs, counts, and error categories. Log retention and access depend on Cloudflare services and account settings.
4. App-specific data and retention
Each app-specific entry identifies the information used and how it is stored or deleted.
Inventory Audit
Information used
- Inventory adjustment dates, quantities, products/variants, SKUs, locations, reasons, inventory states, staff IDs/names, and reference document IDs/URIs retrieved from Shopify when requested.
- A reference may point to an order or another record.
- The App does not directly query customer profiles or Order objects.
Storage and deletion
- Adjustment-history rows and CSV contents are not stored in the App’s D1 database.
- Store settings and saved filters are deleted by the merchant or during uninstall cleanup.
- An uninstall marker containing store identification may remain until Shopify’s shop/redact process.
Metafield Editor
Information used
- Selected products and variants, metafield definitions/values, SKUs, and product/variant names.
- The App does not directly query customer profiles or orders.
- If a customer-reference metafield is selected, a Customer ID may be processed temporarily.
Storage and deletion
- Metafield values and edits are not permanently stored in the App’s D1 database.
- Saved views remain in browser local storage without an expiry. Shopify webhooks cannot remove them; the user must clear the browser’s site data.
- Server-side Shopify sessions are deleted on uninstall.
Inventory Adjuster
Information used
- Products, variants, SKUs, names, inventory items, locations, before/delta/after quantities, merchant-entered reasons or references, and update results.
Storage and deletion
- Adjustment receipts and retry payloads are scheduled for deletion 90 days after creation.
- Cleanup is implemented as a scheduled task, but may be delayed if the task fails or exceeds its processing capacity.
- Minimal request IDs are retained while installed to prevent duplicate application and deleted on uninstall.
Fraud Detector
Information used
- Order IDs/display numbers, dates, amounts, currencies, Shopify risk information, Customer IDs, IP addresses, and some shipping-address fields for cross-order pattern detection.
- Customer names, emails, and phone numbers are not queried.
- Customer IDs, IP addresses, and addresses are converted to shop-specific HMAC values for analysis.
Storage and deletion
- Raw IP addresses, addresses, and Customer IDs are not stored in the analysis D1 tables.
- Order summaries and HMAC signals are designed to be deleted within 90 days after order creation; deletion may be delayed if scheduled cleanup fails.
- For Shopify customer-data requests, the merchant retrieves the report and provides it to the buyer. The App does not automatically reject or cancel orders.
Product Validator
Information used
- Product/variant IDs and names, SKUs, barcode values and types, scan status, and detected issues.
- The App does not query customer, order, or inventory information.
Storage and deletion
- Scan snapshots are retained for up to seven days and the app-wide daily quota counter for ten days, after which cleanup is scheduled.
- Deletion may be delayed if cleanup does not run.
- The App does not store customer data as functional app data.
Returns Manager
Information used
- Orders, returnable line items, return reasons, and optional notes submitted by the buyer logged into their Customer Account.
- Merchants review return details in Shopify Admin and process them through Shopify.
- The App does not directly query customer names, emails, phone numbers, or addresses.
Storage and deletion
- Return notes are sent to Shopify but are not stored in the App’s D1 database.
- Return-index identifiers are kept while a return is pending/in progress. Records in CANCELED, CLOSED, or DECLINED status are scheduled for deletion 365 days after their last update.
- Fulfilled privacy-request records are scheduled for deletion after 30 days. Detailed quota operation data is scheduled for deletion after 90 days.
- Minimal anti-replay records remain while installed. Pending privacy requests and redaction tombstones are retained as needed.
- Scheduled cleanup may be delayed.
The periods above describe the Apps’ implemented retention policy. Failed cleanup jobs, recovery backups, and provider or platform logs may delay complete deletion. Backups are subject to the relevant provider’s systems.
5. Purposes
We use information for:
- Shopify authentication and app features
- Reading or updating Shopify data at the merchant’s request
- Saving settings and operation results, and preventing duplicate operations
- Responding to Shopify privacy requests, providing support, maintaining security, and troubleshooting
We do not use buyer data for advertising, sell it, or use it for unrelated cross-store profiling. Fraud Detector provides investigation signals and does not automatically reject or cancel orders.
6. Shopify, Cloudflare, and other processing providers
The Apps use the following providers to process information:
- Shopify: Admin API or Customer Account API
- Cloudflare: Workers for app execution and D1 for most persistent data. Fraud Detector and Returns Manager also use Queues.
The reviewed app code does not integrate with a separate advertising, analytics, or AI provider.
- Shopify and Cloudflare may process information outside Japan. We do not guarantee that processing or storage occurs only in a particular country.
- Cloudflare describes encryption at rest for D1 and TLS between Workers and D1. This does not mean every account setting, backup, or access log has been individually audited.
- Application-layer encryption for D1 tokens and other stored values is not implemented.
7. Sharing and merchant control
- The Apps display information to users authorized in the merchant’s Shopify store.
- The merchant controls who receives exports, including CSV files.
- Office Hasegawa may not be able to remotely delete files downloaded to a device or settings/copies stored in a browser.
- We do not disclose information to third parties except to Shopify, providers needed to operate the Apps, or when legally required.
8. Retention, uninstall, and privacy requests
- Shopify sessions and tokens are retained as needed for authentication and are deleted in response to uninstall or Shopify shop/redact events.
- Automatic cleanup of expired sessions is not implemented uniformly across all Apps, so some session records may remain until a deletion event.
- Settings, histories, and deletion behavior differ by App as described above.
The Apps receive Shopify customers/data_request, customers/redact, and shop/redact webhooks, verify their signatures, and process the relevant information held by the App.
- For Fraud Detector and Returns Manager, the merchant retrieves reports relating to buyer requests and provides them to the buyer.
- Office Hasegawa does not automatically send those reports to buyers.
- Buyers may also contact the merchant whose store they used.
For questions or deletion requests about an App or information it stores, contact us below. We will verify the requester and relevant store and respond under applicable law and Shopify requirements.
9. Security
- The Apps use Shopify authentication, shop-scoped data access, necessary API permissions, and webhook signature verification.
- Shopify tokens are not intentionally exposed to ordinary browser UI data.
- Some values in D1 do not have application-layer encryption beyond provider-level encryption/TLS.
- Account permissions, log retention, backups, and multi-factor authentication depend on provider and operator-account settings. No method of transmission or storage is completely secure.
10. Children
The Apps are business services for Shopify merchants and are not directed to children.
11. Changes
We may update this Policy when app data practices, providers, retention periods, or contact details change. We will update the effective date.
12. Operator and contact
Office Hasegawa / オフィス長谷川2F-C Shibuya Dogenzaka Tokyu Building, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan
Phone: +81 80-5724-2942
Email: [email protected]