Privacy Policy
Last updated: September 21, 2026
1. Introduction
DutyRight ("we", "our") is a Shopify app that helps EU-based sellers optimize customs declaration costs by analyzing HS codes and product data. This Privacy Policy explains how we collect, use, and protect your data when you use our app.
2. What Data We Collect
When you install DutyRight, we collect the following data through official Shopify API permissions:
- Store information: Your Shopify store domain, email address, and subscription plan status.
- Product data: Product titles, variants, prices, and HS codes (if you have set them).
- Order data (once PCD approved): Order numbers, order dates, and product line items. We do NOT collect customer names, addresses, or payment information.
- Email address: Collected when you sign up or purchase a plan, for account management and support.
3. How We Use Your Data
We use your data solely to provide and improve our services:
- Run product HS code audits and generate customs cost optimization reports.
- Calculate potential savings from HS6 grouping optimization.
- Manage your subscription and send payment receipts.
- Provide customer support when you contact us.
We do NOT:
- Sell, rent, or share your store data with third parties for marketing purposes.
- Use your data for automated decision-making that affects you legally or significantly.
- Collect any customer payment information or full customer PII.
4. Data Storage and Retention
Your data is stored securely on MongoDB Atlas (cloud database). We retain your data only as long as your store has the app installed, or as needed to provide support.
If you uninstall the app, your data will be deleted within 30 days. You can also request immediate deletion by emailing us at support@eur3duty.com.
5. Data Security
We take reasonable measures to protect your data:
- All communication is encrypted over HTTPS.
- API keys and secrets are stored as environment variables, never in code or client-side.
- Access to the backend is restricted and logged.
- We do not store any sensitive customer payment data.
6. Your Rights (GDPR / CCPA)
You have the right to:
- Access: Request a copy of the data we hold about your store.
- Deletion: Request deletion of your data at any time.
- Correction: Correct any inaccurate data.
- Objection: Object to certain processing of your data.
To exercise any of these rights, contact us at support@eur3duty.com. We will respond within 30 days.
7. Uninstalling the App
You can uninstall DutyRight at any time from your Shopify admin → Apps section. Once uninstalled, your data will be deleted automatically within 30 days.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
9. Contact Us
Questions about this Privacy Policy? Contact us at:
Email: support@eur3duty.com