Vault — Product Aftercare (“Vault”, “we”, “us”) is a Shopify app that helps merchants manage product registrations, serial numbers, warranty coverage, service records and customer claims. For privacy questions about Vault, contact info@joeybuijsers.com.
1. Who is responsible for your information?
For product purchases, warranty registrations and claims, the Shopify merchant normally determines why and how customer information is processed (the data controller). Vault provides the software used on the merchant’s behalf (a service provider/data processor). For our own app administration, support and security operations, we may act as a controller. If you are a customer of a store, contact that store first regarding your order, warranty or account.
2. Information we process
- Shop information: store domain, configuration, app installation and subscription status, and account/session data required to connect Vault to Shopify.
- Product and order information: purchased products, order and line-item references, purchase dates, serial numbers, warranty terms and coverage dates.
- Customer information: Shopify customer identifiers, names where accessed for product or customer support, and email addresses used to link products and deliver notifications.
- Aftercare records: claim descriptions, messages, repair and service notes, warranty changes, ownership transfers and files uploaded to claims.
- Technical information: security and request logs, rate-limit records, operational diagnostics and information needed to prevent misuse.
- Merchant email configuration: sender settings and SMTP credentials, if the merchant enables customer notifications.
We do not require customer phone numbers or postal addresses for Vault’s core features. Merchants and customers should avoid including unnecessary personal information in free-text fields or attachments.
3. Why we use information
We process information to provide product tracking and warranty services, link Shopify orders to product records, manage customer claims, support ownership changes, send merchant-configured transactional updates, secure the app, resolve support requests, administer subscriptions and comply with privacy obligations. These are operational messages, not marketing emails sent by Vault.
4. Shopify and other service providers
Vault communicates with Shopify to authenticate merchants, verify store and customer access, retrieve authorized order or product details, and manage app billing. The app is hosted on infrastructure used to operate the service. When a merchant enables email notifications, messages are delivered through the SMTP provider configured by that merchant. These providers may process the minimum data needed to perform their services under their own applicable terms.
5. Customer portal and public passports
Customer-specific products, claims and attachments require the appropriate Shopify customer identity and access checks. Merchants on eligible plans may separately publish a product passport using a shareable URL or QR code. A published passport may show product details, serial numbers and service notes explicitly marked public; it must not include private claim conversations or private service notes. Anyone holding a published passport URL may be able to view its public content until the merchant unpublishes it, archives the product or loses access to the feature.
6. Retention and deletion
Information is retained while needed to provide the service and to meet applicable business, contractual or legal requirements. Uninstalling Vault disables the connection, removes active Shopify sessions and stored merchant SMTP credentials, and stops pending customer notifications; it does not immediately erase all historical product and claim records. Shopify privacy requests are handled through the app’s customer data request, customer redaction and shop redaction processes. Data may also remain temporarily in access-restricted backups until their normal retention or deletion cycle. We will not retain personal information longer than required for its lawful purpose.
7. Security
Vault uses Shopify-authenticated connections, store-level and customer-level access restrictions, restricted customer portal operations and protections against forged requests. Stored merchant SMTP passwords are encrypted. No internet service can guarantee absolute security; please contact us if you believe information has been exposed.
8. Your privacy rights
Depending on applicable law, you may have rights to access, correct, erase or obtain a copy of personal information, restrict or object to processing, or lodge a complaint with a data protection authority. Store customers should generally contact the merchant they purchased from first. Merchants may contact us directly at info@joeybuijsers.com. We will assist with applicable requests and Shopify privacy workflows.
9. International processing
Shopify, infrastructure providers and a merchant’s chosen email provider may process information in countries other than the customer’s own. Where required, appropriate legal safeguards must apply to such transfers.
10. Changes to this policy
We may update this policy when Vault’s features, vendors or legal obligations change. The updated version and revision date will be published on this page.
11. Contact
Vault — Product Aftercare
info@joeybuijsers.com