Privacy policy

BB Checkout Rules — last updated 21 October 2026

What the app does

The app lets a store set order limits (minimum and maximum order value, item counts and per-product quantities) and payment rules (rename, hide or reorder payment methods) that Shopify applies at checkout.

What data the app handles

• Store session data — the shop domain and the access token Shopify issues when the app is installed. Used only to save the store's settings.
• The store's settings — the limits and rules the merchant enters, including product names and IDs chosen for product limits. Stored in Shopify, on the store's own checkout rules.
• At checkout — cart contents and payment method names are read by the app's Shopify Functions inside Shopify's checkout. Nothing is sent to or stored by the app.

The app does not read orders or customer records, does not store customer data, and does not sell or share data.

Storefront script

If the store turns on the "Cart limit messages" app embed, a small script shows the limit message when an item can't be added to the cart. It reads only the cart response from the store and sends nothing anywhere.

Where data is stored

The app runs on Vercel (Sydney region). Session data is stored in a private PostgreSQL database (Supabase) that is not publicly accessible. Settings are stored in Shopify.

Retention and deletion

Session data is deleted when the app is uninstalled. Privacy requests received from Shopify (customer data requests and erasure requests) are handled within 30 days. A record of each request is kept with Shopify's IDs only (no names, emails or phone numbers).

Contact

Questions or requests: hello@bilalburney.com