VIERA LABS / SHOPIFY APP PRIVACY

Viera Material Gate

This policy applies to Viera Material Gate, Shopify app 434465243137, provided by the Viera Labs team. For privacy questions or requests, contact support@vievot.com. It does not describe the data practices of other Viera products.

Information the app processes

Shopify supplies the shop domain and identifier, authenticated session and account identifiers, permitted order identifiers and order lifecycle timestamps, and subscription information such as the plan item, billing period, price, trial and current entitlement. Account-owner information is used to check authority for specific actions; it is not proof of legal ownership of materials. The supported order query does not request customer names, postal addresses, email addresses or telephone numbers.

Merchants provide structured material and invoice records: material, supplier, unit, currency, quantity, price and effective/document dates; job, parcel, order and receipt relationships; inspection results; correction declarations; and source identifiers, revisions, digests and lineage. These records can relate to identifiable people even without a customer name. Source digests are not anonymous data. Supported imports retain classified structured fields, rather than unrestricted raw CSV or unclassified free text. Do not upload unrelated personal information.

Authenticated privacy notifications may supply customer and order identifiers and the requested scope. We retain request and processing status needed to resolve them. If you email support, we receive the contact details and information you choose to send. Do not send passwords, API secrets or unnecessary customer documents.

Purpose and access

We use this information to operate the installed app, link declared material jobs to accessible Shopify orders, compare invoices with effective-date prices, record receiving and QC evidence, control authorized corrections, verify subscription access, provide exports and backups, secure the service and handle privacy requests. Recorded evidence is not legal or physical certification. The app does not use these records for advertising, sell them, or send them to an AI model for training.

The app is used in Shopify Admin. It does not install storefront advertising cookies or monitor customers browsing the merchant's store. Shopify session mechanisms are used for authentication. The public information website has a separate website privacy policy.

Storage and service providers

App-managed records are stored using Cloudflare Workers and SQLite Durable Object storage, with shop-scoped access controls. Shopify provides authentication, authorized API access and app billing; the app does not collect payment-card details. Cloudflare delivers and protects the hosted service and may process network/request metadata under its own service terms. Support correspondence is processed through the designated support mailbox. Information may be disclosed where necessary to comply with a valid legal obligation.

These providers operate internationally. This policy does not promise storage in a particular country or an EU-only location. We use the providers' applicable contractual and security arrangements for the service.

Retention, deletion and restoration

App-managed business records are retained while needed to provide the merchant's workspace and until an authorized deletion or applicable lifecycle request is processed. Authentication and entitlement are revoked according to installation and subscription state. Uninstalling is not a promise that every record disappears immediately: Shopify privacy notifications and the associated processing must also be completed.

Verified privacy requests are matched to the exact shop and verified customer/order relationships. Processing covers associated app-managed records, derived data, managed exports and snapshots. Deletion tombstones constrain app-level backup restoration so erased data is not restored. A shared or legacy record whose scope is unclear requires review; receipt of a request is not a claim that erasure is complete. Outstanding obligations must remain tracked and resolved within applicable requirements. We do not treat all audit records as automatically exempt from erasure. Any legally required retention needs a documented basis, limited scope and retention end.

Provider-managed recovery copies are subject to the provider's recovery and retention arrangements and must be considered when resolving a request. Files explicitly downloaded to a merchant's device are under that merchant's control; the app cannot recall or delete those copies remotely.

Your choices and requests

Merchants can request access, correction, deletion or restriction of their app-managed information through support. Customers should contact the merchant responsible for their order; the merchant can use Shopify's privacy-request process. We verify the requester's authority and scope before disclosing or changing records. Contact support if a request remains unresolved, giving the shop domain and request identifier where available, without sending unnecessary personal data.

Changes and contact

We will update this page when these practices materially change. The effective date identifies the current policy. Privacy and app support: support@vievot.com.