Privacy policy

Region Lock is a Shopify app built and operated by Ioun Developers. It keeps per-region stock numbers on the product variants of the stores that install it, and optionally enforces regional availability at checkout. This policy explains what the app stores, why, who else sees it, and how long it lasts.

Merchants who install the app are our customers. Their buyers are not: the app holds nothing about them at all, as set out below.

The short version

Region Lock does not collect, store or process the personal data of your customers. What we keep is what the app needs to talk to your store and to remember your configuration.

What we store

• Your shop domain and access token. The myshopify.com domain of your store and the offline access token Shopify issues when you install the app. These exist so the app can make API calls back to your store.
• Your configuration. Which of your locations maps to which region, which market gates on which region, the enforcement mode you chose, and the sync debounce setting.
• Sync state and logs. The progress of backfills, timestamps of recent syncs, and operational log rows (shop domain, variant and location identifiers, counts written, error messages). They contain no customer identifiers.

That is the whole list.

What we do not store

Customer names, email addresses, phone numbers, shipping and billing addresses, order contents and payment details are never collected by this app. We do not request the read_customers or read_orders access scopes, so Shopify does not send us that data in the first place.

Your stock numbers are not warehoused by us either. The app reads your per-location inventory, computes per-region sums, and writes them to metafields on your own variants, where they stay in your store under your control. Our database keeps the configuration and logs described above, not a copy of your inventory.

The scopes the app requests are read_inventory, read_products, write_products, read_locations and read_markets. The only write scope is products, and it is used for one thing: writing the regional stock metafields and their definitions to your variants and your shop.

The checkout validation

When hard enforcement is on, the validation logic runs as a Shopify Function, executing on Shopify’s own infrastructure at checkout. It receives cart contents transiently to decide whether a line may be purchased, and returns the result to Shopify. That data is never transmitted to us, and nothing from it is retained anywhere.

Sharing and processors

We do not sell, rent or share your data. The app is hosted on Railway (United States), which stores the records described above on our behalf. Shopify is an independent controller of your store’s data under its own terms.

Retention

Everything above exists for as long as the app is installed. When you uninstall, Shopify sends us the uninstall webhook and the installation’s token is invalidated; stored configuration and logs for the shop are deleted on a short schedule thereafter. Metafield values already written to your variants are yours and remain in your store.

GDPR requests

The app implements Shopify’s mandatory privacy webhooks. A customer data request or erasure request returns and erases nothing, because nothing about customers is held. A shop erasure request deletes the shop’s stored records as described above.

Contact

Questions about this policy: hello@ioun.dev.