VIERA LABS / SHOPIFY APP PRIVACY

Viera Carrier Audit

This policy applies to Viera Carrier Audit, Shopify app 437974269953, provided by the Viera Labs team. Privacy and app support: support@vievot.com. It does not describe other Viera products.

Information the app processes

From Shopify, the app processes the shop domain and identifier, authentication/session and installation information, permitted order and fulfillment identifiers and shipment/tracking evidence, and app subscription details used to verify access. Order and tracking information can be linked to a customer even when the app does not request their name, address, email or phone. We do not need payment-card details; Shopify handles app billing.

Merchants supply compatible carrier-invoice and fulfillment CSVs, mappings, declared pricing baselines, source rows, review notes and dispute/credit records. Financial projects can include amounts, currencies, source references, periods and history. Provide only the information needed to reconcile the shipment and charges, and avoid unrelated personal data. Support correspondence contains the contact information and details you choose to send; do not send passwords, API secrets or unnecessary customer documents.

Browser projects and server records are different

Invoice and financial projects are held in browser memory until the merchant explicitly downloads a project archive or recovery backup. The app does not automatically save those financial projects on its server. Closing or refreshing without the downloaded file can lose unsaved work. A downloaded project can be reopened by the authorized merchant, and exported CSVs and printable reports remain on the merchant's device.

Backend installation, authorization, entitlement and privacy/lifecycle records are a separate dataset maintained using Cloudflare Workers and D1. Any app-managed snapshot or derived copy belongs to its authenticated shop and is subject to the relevant privacy scope. A project-file download is not evidence of a server-side financial backup.

Use, sharing and service providers

We use information to authenticate the shop, verify subscription access, match supplied carrier charges to permitted shipment evidence, present differences for review, preserve merchant-recorded dispute/credit history, produce exports and process privacy requests. A difference is not proof of an overcharge, settled credit or recovered money. The app does not submit carrier claims automatically. The app does not sell these records, use them for advertising or send them to an AI model for training.

Shopify supplies authentication, APIs and app billing. Cloudflare hosts the application and its D1 service records and may process request/network metadata for delivery and security under its service terms. Support correspondence is handled through the designated support mailbox. We may disclose information where necessary to comply with a valid legal obligation. Providers operate internationally; this policy does not promise a specific storage country or EU-only residency.

The app runs in Shopify Admin. It does not install storefront advertising cookies or track customers browsing the merchant's store. Shopify session mechanisms support authentication. The public information website has its own website privacy policy.

Retention, privacy requests and restoration

Backend records are retained while needed for the app's operation and applicable installation, billing and privacy obligations. Uninstall revokes app access but is not a promise of instantaneous deletion of every record. Authenticated Shopify privacy requests are received and processed for the exact shop and relevant customer/order scope. Acceptance of a request is distinct from completed erasure; retries and unresolved scope must remain tracked.

Authorized erasure covers associated app-managed records and copies. Tombstone and recovery controls must be respected during app-managed restoration. Financial or audit records are not automatically exempt from deletion. Any legally required retention needs a documented basis, limited scope and retention end. Provider-managed recovery copies are governed by provider recovery/retention arrangements and must also be considered when resolving requests.

Merchants control downloaded project archives, exports and printouts. The app cannot recall or delete files on their devices; merchants must secure, retain or delete those copies in accordance with their responsibilities. Reopening an old project does not authorize access for another shop or override current installation/privacy restrictions.

Your requests and contact

Merchants can contact support to request access, correction, deletion or restriction of app-managed information. Customers should contact the merchant responsible for their order, who can use Shopify's privacy-request process. We verify authority and scope before disclosing or changing records. Provide the shop domain and request identifier where possible, rather than unnecessary personal data.

Material changes to these practices will be reflected here with an updated effective date. Questions: support@vievot.com.