Privacy Policy
Last updated: April 20, 2026
1. Overview
Rentshelf ("we", "the app") is a Shopify app that turns merchant products into rentable products. This policy explains what data we collect when the app is installed on a Shopify store, how we use it, and how to request deletion.
2. Data we collect
When a merchant installs Rentshelf, we receive from Shopify:
- Shop domain, plan, timezone, primary currency and contact email
- Product and variant data for products linked to the app
- Order data at the moment an order is created (order ID, line items, customer email, fulfilment status)
We do not collect:
- Payment card details
- Customer addresses beyond what Shopify exposes on the order
- Any data from products that have not been linked to Rentshelf
3. How we use it
Data is used solely to operate the rental features: rendering availability, calculating per-day prices, triggering automated booking emails, and displaying bookings in the admin dashboard. We never sell data or share it with third parties for marketing.
4. Storage & retention
Data is stored in encrypted form on Cloudflare infrastructure in the EU region. Backups are retained for 30 days.
When a merchant uninstalls Rentshelf, Shopify sends a shop/redact webhook 48 hours later. On receipt, we delete all data for that shop within 30 days, in line with Shopify's GDPR requirements.
5. Customer data requests
Merchants can request deletion of a specific customer's rental data at any time by emailing privacy@rentshelf.app with the customer's email address. We respond within 30 days.
6. Sub-processors
- Cloudflare — hosting and database (EU)
- Shopify — authentication, webhooks and order data
- Resend — transactional email delivery
7. Contact
For any privacy question, write to privacy@rentshelf.app.