Privacy policy

Last updated: October 19, 2026

OrderCap (“the App”) is a Shopify app made by Centubo (“we”, “us”). This policy explains what information the App collects when a merchant installs it on a Shopify store, how we use it, and the choices you have.

Permissions the App requests

Shopify permission	Why we need it
`write_validations`	to add the cart and checkout check that applies your order limits
`write_payment_customizations`	to hide, rename or reorder payment methods at checkout according to your payment rules
`read_products`	to let you pick the products, variants and collections a rule applies to
`read_orders`	to count the orders placed while your rules are on and how many matched each payment rule, for your results

Information we collect

What	Why
Store information: your store's myshopify domain, Shopify shop ID, currency, time zone, plan and install date.	To run the app for your store.
Access credentials Shopify issues to the app, and session details Shopify provides when a staff member opens the app.	To call the Shopify API on your behalf and sign you in to the app.
Your rules: names, status and order, the products, variants and collections you pick (ID, title and image), limits, messages and translations, and payment conditions and actions, including the countries and customer tags you enter.	To apply your rules at checkout and show them in the app.
For each order placed while your rules are on: the order ID and date. For each day: the number of orders, and the number of orders that matched each payment rule.	To show your results.
Order notifications (webhooks) sent by Shopify, kept so they can be processed reliably and retried after an error. They are deleted automatically 7 days after processing, and at the latest after 30 days.	To count orders. To check which payment rules an order matched, we read its subtotal, products, shipping country and customer tags, and keep only the count. We do not store or use customer names, emails or addresses.

We do not collect payment card details.

Shoppers on your store

At checkout, your rules run inside Shopify as Shopify Functions: they don't set cookies, track buyers or send buyer data to our servers. On your product page, the optional OrderCap limits block only uses your theme's data and does not contact our servers.

How we use information

To provide, maintain and improve the App.
To show you the results the App brings to your store.
To answer support requests and send important notices about the App, such as pricing changes.

We do not sell personal information and we do not use it for advertising.

Sharing

We share information only with:

Shopify, to run the App.
Service providers that host and operate the App for us (cloud servers, database backups, email), under contracts that require them to protect the data and use it only for our purposes.
Authorities, when the law requires it.

Storage, security and retention

Data is stored on secured servers and transferred over encrypted (HTTPS) connections.
We keep your data while the App is installed on your store.
When you uninstall the App, Shopify asks us to erase your store's data 48 hours later. We then delete it from our database. Backups that contain it are overwritten within 30 days.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete personal information about you, and to object to how we use it. Merchants can ask us at support@centubo.com. Shoppers should contact the store they bought from. We respond to data requests that Shopify forwards to us, including requests made under the GDPR and the CCPA.

Changes to this policy

We may update this policy when the App changes. We will change the date at the top, and tell merchants in the App about important changes.

Contact

Questions about this policy or your data: support@centubo.com.