Privacy Policy
We Are Open lets Shopify merchants set business hours, pause checkout while the store is closed, and take scheduled orders. This policy explains what information the app collects when you install and use it, why, and what happens to it. It is written to be read, not skimmed past — but here is the short version.
The short version
- We store your store's basic details, the hours and settings you configure, and your subscription status.
- We do not store your customers' personal information — scheduled-order details are saved on the order in your Shopify admin, not with us.
- We never sell or rent your information, and we don't share it with anyone except the services that run the app.
- Uninstalling the app deletes your data automatically.
What we collect
When you install We Are Open, Shopify shares basic information about your store with the app. We store:
- Store details: your store's myshopify domain, store name, owner name, contact email, timezone, primary language, and country.
- Your configuration: the business hours, holidays, notification messages and colors, order-scheduling settings, and product availability groups you set up in the app. These are yours; we store them to run your storefront's open and closed states and to let you edit them later.
- Subscription status: whether your store has an active subscription, so we know when to provide the app's features. Billing itself is handled entirely by Shopify — we never see payment details.
- API access credentials: the access token Shopify issues so the app can act on your store. Tokens are never shared and are revoked the moment you uninstall.
Your customers
We do not store your customers' personal information. The app's storefront features run in your customers' browsers, and here is exactly what they do:
- The open/closed notice and the scheduling popup ask our servers only for your store's current status — the requests carry your store's domain, theme, language, and a requested date, never anything about the shopper.
- When a customer schedules an order, the chosen date, time slot, and note are saved onto their cart and order inside your Shopify store. That information lives in your Shopify admin under your own privacy practices; it does not reach our servers.
- The storefront stores one functional cookie (named
weareopenplus the store language) in the shopper's browser for up to a day. It caches your store's open/closed status so pages don't re-request it, contains no personal information, and is not used for tracking of any kind. - Like any web service, our servers keep standard technical logs of incoming requests (including IP addresses) for a short period, used only for security and reliability.
Shopify's mandatory privacy webhooks (customer data requests and redaction) are honored automatically; because we hold no customer data, a customer redaction request has nothing to erase.
Shopify permissions the app requests
| Permission | Why the app needs it |
|---|---|
| Read and write validations | To install and operate the checkout rule that pauses checkout while your store is closed. This is Shopify's supported mechanism and works on every plan. |
| Read themes | To check whether the We Are Open storefront embed is enabled in your theme, so the app can tell you when your notices aren't showing. The app never modifies your theme files. |
| Read and write products | Only used by the optional product availability feature, to make the products you choose unavailable outside the hours you set. |
| Read locales | To show storefront notices in your store's published languages. |
| Read and write script tags, read orders | Legacy support for stores that installed before the current theme-embed and checkout-rule integration. Not used by current installs. |
How we use your information
- To run your store's open and closed states: showing notices, pausing checkout, and offering scheduled ordering according to the hours you set, in your store's own timezone.
- To operate your account: verifying your subscription, showing the right setup steps, and detecting when a theme change has switched the app embed off.
- To email you about your account — a welcome message on install, a notice if we detect the storefront embed has been switched off, and a brief message if you uninstall. We don't send marketing email.
- To diagnose errors and keep the service reliable.
Who we share it with
We don't sell, rent, or trade your information, and we don't share it with advertisers or data brokers. The only third parties that touch your data are the services we use to run the app, each bound to process it solely on our behalf:
| Service | Purpose | Location |
|---|---|---|
| Heroku (Salesforce) | Application hosting and database | United States |
| Amazon Web Services | Hosting of legacy storefront files for older installs | United States |
| Rollbar | Error monitoring (may include your store domain in error reports) | United States |
| Email delivery provider | Sending the account emails described above | United States |
We may also disclose information when required by law — to comply with a subpoena, court order, or other lawful request — or to protect our rights and the safety of our merchants.
Retention and deletion
We keep your information only while the app is installed. When you uninstall We Are Open, Shopify notifies us and we delete your store record, hours, holidays, and settings automatically. Shopify's shop-redaction requests remove any remaining trace of your store.
Error-monitoring services retain diagnostic logs for a limited period according to their own retention settings.
Your rights
You can view and edit everything the app stores about your store at any time inside the app, and delete all of it by uninstalling. Depending on where you live, you may also have the right to access, correct, export, or delete the personal information we hold about you, or to object to how it's processed — including under the GDPR if you're in the European Economic Area or the United Kingdom, and under the CCPA if you're a California resident. To exercise any of these rights, email us using the contact details below; we'll respond within 30 days.
Because our infrastructure is hosted in the United States, your information is transferred to and processed there. We rely on our providers' standard contractual safeguards for those transfers.
Changes to this policy
We may update this policy to reflect changes in the app or in the law. When we do, we'll change the date at the top of this page; for significant changes we'll also notify you by email at the address on your store.
Contact
We Are Open is built and operated by YouOrderit in Barranquilla, Colombia. For questions, requests, or complaints about privacy, email elias@youorder.it.