Privacy policy
Effective November 7, 2026. Checkout Rules is a Shopify app made by Steelyard Ventures LLC ("we").
What the app stores
When a store installs Checkout Rules, Shopify gives us the store's domain and an API access token so the app can manage the store's checkout customizations and list its products. We keep them in the app's database only while the app is installed. The rules you create are saved in your own Shopify store, as metafields on your payment and delivery customizations, not on our servers.
Customer data
The app does not collect, store, sell or share your customers' personal data. Rules are evaluated inside Shopify checkout by Shopify Functions, which read the cart during checkout only (shipping country, province and postal code, cart total, item count, customer tags, collections, currency and whether the cart needs shipping). That data stays inside Shopify and never reaches our servers.
Products and collections
We read your product collections only so you can pick them when building a rule.
Uninstalling and privacy requests
When you uninstall the app we delete the store's access token and session. We honour Shopify's mandatory privacy webhooks: customer data requests and customer redaction requests have nothing to return or delete, and a shop redaction request removes anything left for that store.
Hosting and security
The app runs on Fly.io servers in the United States (Ashburn, Virginia). All traffic uses HTTPS. Billing is handled by Shopify; we never see your payment details.
Contact
Questions about this policy: operations@steelyardventures.com. Changes to this policy are posted on this page with a new effective date.