Privacy Policy

CaseScan is provided by Dibbuhl. This policy explains what information CaseScan processes when a Shopify merchant installs and uses the app.

Information CaseScan processes

• Shop identity and authentication/session information required to connect the app to Shopify.
• Product and variant information needed to configure CaseScan, including product titles, variant identifiers, images, and barcodes.
• CaseScan mappings created by the merchant, including the scanned barcode and units-per-scan quantity.

CaseScan does not require customer, order, payment, or checkout data for its core functionality and does not intentionally store that information.

How information is used

Information is used only to authenticate the merchant, display and manage CaseScan mappings, and add the configured Shopify variant quantity to a Shopify POS cart after a scan.

Storage and service providers

CaseScan mappings are stored in Shopify using app-owned data associated with the app installation. Authentication session records are stored by CaseScan's hosting environment. CaseScan relies on Shopify to provide the commerce platform and Railway to host the application server.

Retention and deletion

Local authentication session records are deleted when Shopify notifies CaseScan that the app has been uninstalled or the shop must be redacted. CaseScan responds to Shopify's required privacy and redaction webhooks. Data stored by Shopify is also subject to Shopify's platform retention and app-data lifecycle rules.

Sharing and sale of data

CaseScan does not sell merchant or customer data. Information is shared only with service providers necessary to operate the app or when required by law.

Security

CaseScan uses Shopify's authentication mechanisms and verifies Shopify webhook requests before processing them. Access credentials and production secrets are kept in server-side environment variables and are not exposed in the merchant interface.

Contact

For privacy questions or requests, email support@dibbuhl.ca.