AuctionDesk privacy policy

AuctionDesk is a Shopify app made by Fantasium Media. It lets a store’s shoppers make offers and bid in auctions, and invoices the winning buyer. This policy explains what information AuctionDesk collects when a merchant installs it, how it’s used and protected, and how it’s deleted.

Information we collect

From Shopify, through the permissions the merchant approves:

• product and variant details for the items the merchant lists, and AuctionDesk’s own offer and auction settings stored on those products
• the draft orders AuctionDesk creates to invoice buyers, and whether they’ve been paid
• the name and email of buyers who are signed in to the store
• shop details, such as the store domain and currency

From shoppers, through the store:

• the name and email entered with an offer or bid
• offer amounts, notes, bids and maximum bids
• a salted, one-way hash of the shopper’s IP address, used only to limit spam

Created in AuctionDesk:

• listings, offer history, auction results, second-chance offers and invoice status
• unpaid-invoice strikes for each buyer email, used to block buyers who repeatedly don’t pay. The merchant can unblock a buyer at any time, which clears their strikes.
• a log of emails sent to buyers (recipient, type and delivery status)
• the merchant’s plan

How we use it

Only to run AuctionDesk for the merchant: showing offers and bids, sending buyer emails and invoices, tracking whether invoices are paid, and applying the merchant’s rules for unpaid buyers. Strikes and blocks apply only in the store where they were earned. We don’t sell your data, and we don’t share it with anyone for marketing or advertising.

Service providers

• Shopify runs the platform AuctionDesk is part of and handles billing.
• Fly.io hosts the app and its database in the United States.
• Resend delivers AuctionDesk’s emails.

Each handles data under its own privacy policy.

Storage and security

Data is stored in a PostgreSQL database on Fly.io in the United States. It travels over HTTPS/TLS, and database access requires credentials.

How long we keep it

We keep a store’s data while AuctionDesk is installed. Shopify asks us to erase it 48 hours after the app is uninstalled (shop/redact), and we then delete all of that store’s listings, offers, bids, buyers and email logs. When a shopper asks a merchant to erase their data (customers/redact), we remove their name and email and the notes on their offers.

The log of emails sent on a store’s behalf keeps each recipient’s address for 90 days, so the merchant can confirm whether a buyer received an invoice or reminder. After that the address is removed automatically, and the log keeps only the email’s type, status and date.

We record when a store’s staff view buyer information in AuctionDesk (which staff account, which record and when), without copying the buyer information itself.

Your rights

• See your data in AuctionDesk at any time.
• Delete it by uninstalling AuctionDesk.
• Ask us for an export, or for deletion without uninstalling, by emailing the address below.
• If you’re in the EEA or UK, you also have a right to data portability and can complain to your data protection authority.

GDPR roles

Merchants are the data controllers for their buyers’ information. Fantasium Media acts as a data processor and handles personal data only as needed to provide AuctionDesk.

Children

We don’t knowingly collect information from children under 16. Shoppers must meet the age requirements of the store they buy from.

Changes

If this policy changes, we’ll update the date at the top of this page.

Contact

Fantasium Media, Bozeman, Montana. Email support@deskapps.app or use the contact form.