Privacy Policy

AccountCraft is a Shopify app, published by Barikreativa srl, that lets merchants build their New Customer Accounts pages. This policy explains what data the app processes and how.

Who we are

AccountCraft is operated by Barikreativa srl. For any privacy request, contact ivan@barikreativa.com.

Data we process

• Store & app configuration — the blocks, layouts, fields and consents a merchant creates. Stored in Shopify metaobjects on the merchant's store.
• Protected customer data — to personalize blocks and save the values a customer submits, the app reads and writes customer tags, metafields, and reads limited order context via official Shopify APIs. It does not collect customer names, emails, phone numbers or addresses.
• Sessions — Shopify authentication sessions for the embedded admin, stored in our hosting database. No customer personal data is stored there.

How we use it

• App functionality — authenticate the merchant and render the account pages they configure.
• Personalization — show or hide blocks based on customer tag, metafield, market, B2B status or account age.

We do not sell customer data, and we do not use it for advertising.

Where data lives

Customer field and consent values are stored in Shopify customer metafields, and app configuration in Shopify metaobjects — both owned by the merchant on their Shopify store. The only data held outside Shopify is the app's Shopify sessions. Data is encrypted in transit (TLS) and at rest.

Data retention & deletion

AccountCraft honors Shopify's mandatory GDPR webhooks. On customers/redact and shop/redact, related data is removed; customer values in Shopify metafields are deleted by Shopify when the customer or shop is redacted. Uninstalling the app removes the app's stored sessions for the shop.

Sub-processors

The app is hosted on Render (application & database). Shopify processes all merchant and customer data on the merchant's store.

Your rights

Merchants and their customers may request access to, correction of, or deletion of their personal data by contacting ivan@barikreativa.com. Requests are handled in line with applicable data-protection law (including GDPR).

Changes

We may update this policy; material changes will be reflected on this page with a new "last updated" date.