Privacy policy

Effective date: 15 October 2026

This policy explains what data the Vaulted Downloads app ("Vaulted Downloads", "we", "us") collects when you install it on your Shopify store, how we use it, and your choices. Vaulted Downloads is operated by Artie Codes Pty Ltd (Australia). This is a plain-language policy provided in good faith.

The short version

Vaulted Downloads does not keep any of your customers' personal information. Your files stay encrypted in your own Cloudflare R2 bucket, and the records that track them (your product file lists and per-order download permissions) are stored as encrypted, app-owned metafields on your own Shopify store. We hold only the minimum data needed to connect the app to your store.

What we collect

• Store and session data. When you install the app, we store your store's .myshopify.com domain and the access token and session details Shopify issues, so the app can authenticate API requests. This is held encrypted in our session database.
• Your settings. Your app settings, including the Cloudflare R2 credentials you provide, are stored encrypted so the app can read and write files in your bucket on your behalf.
• App configuration. Your product file lists and the per-order download permissions the app issues are stored in metafields on your store, which are owned by Shopify, scoped to the app, and encrypted by us.

What we do not store

We do not store your customers' personal information. Their names, addresses, emails, phone numbers, payment details, IP addresses, and order contents are never written to our database, to metafields, or to our logs. We hold no customer data at rest.

When we access customer data

To deliver downloads, the app reads order information from Shopify, for example to confirm that an order includes a product before issuing its download links. If you turn on buyer details in the PDF licence footer, the app also reads the buyer's name and email from Shopify at the moment of download, so it can add them to that copy. In both cases the data is used in the moment to complete the task and is never saved by us. Delivering downloads uses Shopify's protected customer data; adding buyer details to the footer additionally uses the buyer's name and email.

Your files

The files you sell stay in your own Cloudflare R2 bucket, encrypted by the app so only a buyer's signed, time-limited link can open them. We do not keep copies of your files, and file bytes are only ever decrypted on the way out to a buyer who has a valid download. We never create public or long-lived links to your files.

How we use data

Solely to operate the app: to authenticate with your store, read and write your files and configuration, deliver downloads to your buyers, and provide support when you contact us. We do not sell data or use it for advertising.

Diagnostic logs

We keep operational logs to run and troubleshoot the app. These record events such as your store's domain, identifiers, counts, timestamps, and error diagnostics. They do not contain your customers' personal information or your file contents. Logs are retained only as long as needed for operations and security.

Where data is stored (sub-processors)

• Fly.io hosts the app and its encrypted session database, in the Sydney (Australia) region.
• Shopify stores your app configuration (metafields) and is the source of the order and product data the app reads.
• Cloudflare provides the R2 object storage that holds your encrypted files. This is your own Cloudflare account and bucket; the app accesses it only with the credentials you provide.
• Resend delivers support emails when you contact us through the website or the app.

Data retention and deletion

• Session and settings data is deleted when you uninstall the app.
• In line with Shopify's mandatory privacy webhooks, we honour:
  • customers/data_request and customers/redact: we hold no customer personal data, so there is nothing to return or redact.
  • shop/redact: within 48 hours of the request (sent after uninstall) we delete any remaining session data for your store.
• Your app configuration is removed by Shopify when the app is uninstalled, as it lives in app-scoped metafields. Your files remain in your own bucket, under your control.

Your rights

Depending on your location, you may have rights to access, correct, or delete personal data. Because we hold no customer personal data and only minimal store session data, most requests can be resolved by uninstalling the app. For anything else, contact us and we will assist.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by a new effective date at the top of this page.

Contact

• Email: privacy@vaulted-downloads.com
• Support: support@vaulted-downloads.com
• Operator: Artie Codes Pty Ltd, Australia