Privacy Policy

1. Introduction

Lapro ("we," "our," or "us") is committed to protecting the privacy of our users and the customers, prospective customers, and visitors of merchants who use our services ("you," "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website and services, including our Shopify app and related features.

2. Information We Collect

We collect and process information in the following categories:

2.1 Information you provide directly

Account and support information: such as your name, email address, and messages you send to us (e.g., support requests).
Billing and payment information (if applicable): such as billing contact details and payment-related metadata processed via our payment providers.

2.2 Information processed on behalf of merchants (Shopify app data)

When a merchant installs and uses our Shopify app, we may process certain information from the merchant's store only as needed to provide app functionality, such as:

• Customer email and order number provided by a customer to verify order ownership.
• Order note content provided by a customer (e.g., delivery instructions, gift message) to update an order note.
• Technical identifiers necessary to perform the request securely (e.g., request metadata, timestamps, IP address in logs).

We do not access additional protected customer fields (name, phone, address) unless a specific feature explicitly requires it and is disclosed to merchants.

2.3 Usage data

We may collect information about how our website and services are accessed and used, such as:

• IP address, browser type, device information, operating system, and pages visited.
• Basic diagnostic events (e.g., errors, request success/failure).

2.4 Cookies and tracking technologies

Our website may use cookies and similar technologies for essential functionality and to improve user experience. We do not use Shopify customer data for advertising or marketing.

3. How We Use Your Information

We use information for the following purposes:

3.1 To provide and maintain our services

Operate, maintain, and improve our website, app, and features.

Provide the Order Note Editor feature for merchants:

• Verify a customer's order ownership by matching order number + email.
• Update the order note in the merchant's Shopify store when the customer saves changes.

3.2 To communicate with you

Respond to inquiries and provide customer support.
Send service-related notices (e.g., updates about outages or changes).

3.3 To ensure security and prevent abuse

Detect, prevent, and address technical issues, fraud, and abuse (e.g., rate limiting to prevent brute-force attempts).

3.4 For legal compliance

Comply with applicable laws, regulations, and lawful requests.

We do not use Shopify customer personal data for marketing, advertising, profiling, or sale.

4. Sharing Your Information

We may share information only as described below:

4.1 Service providers

We may share information with trusted third-party service providers who help us operate our services (e.g., hosting, monitoring, customer support tools). These providers are authorized to process information only as necessary to provide services to us and are required to protect it.

4.2 Legal obligations

We may disclose information if required by law or in response to valid requests by public authorities.

4.3 Business transfers

If Lapro is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

4.4 With consent

We may share information if you provide explicit consent.

We do not sell personal information.

5. Data Security

We implement reasonable administrative, technical, and organizational measures designed to protect information from unauthorized access, alteration, disclosure, or destruction. Examples include:

• Encryption in transit (e.g., TLS).
• Access controls and least-privilege principles for staff.
• Logging and monitoring for security events.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain information only as long as necessary for the purposes described in this Privacy Policy.

6.1 Shopify customer and order data

For the Order Note Editor feature:

• We do not store customer email, order details, or order note content in our database.
• Data is processed transiently to verify the request and submit the update to the merchant's Shopify store.

6.2 Security and operational logs

We may retain limited security and operational logs (e.g., timestamps, request outcomes, IP address, error codes) to maintain security and reliability.
Log retention period: typically 7–30 days, unless a longer period is required to investigate abuse, security incidents, or comply with legal obligations.

6.3 Support communications

Support messages may be retained for as long as needed to address the request and for reasonable record-keeping.

7. Your Rights

Depending on your jurisdiction, you may have rights regarding personal information, including:

• Access, correction, deletion, and portability (where applicable).
• Objection or restriction to certain processing (where applicable).
• Opt-out of marketing communications (if any are sent).

Shopify merchant customers
If you are a customer of a Shopify merchant using our app, the merchant is typically the "controller" of your personal data. Requests to access, delete, or modify data in the merchant's Shopify store should be directed to the merchant. We will assist merchants as required by applicable law and our agreements.

8. International Data Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards to protect information when transferred internationally.

9. Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will take steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website and update the "Last updated" date. Your continued use of our services after changes indicates acceptance of the updated policy.

11. Contact Us