1. Who we are
Smart Notes is operated by Untapped B.V., registered in the Netherlands. You can contact us at info@untapped.nl.
2. What data we collect
When you install Smart Notes on your Shopify store, we collect and store the following:
- Store information: Your Shopify store domain and access tokens required to operate the app.
- Note content: The text, formatting, images, categories, and priorities you create using Smart Notes. This is internal staff content created by you.
- Resource identifiers: The Shopify IDs of orders, customers, and products that notes are attached to.
- Usage metadata: Timestamps of when notes are created and updated.
We do not collect: customer personal data (names, emails, addresses), payment information, browsing behaviour, or any data beyond what is necessary to operate the notes functionality.
3. How we use your data
We use your data solely to:
- Store and retrieve notes you create within the app
- Sync note metadata to Shopify metafields so notes appear in your admin blocks
- Provide search, export, and filtering functionality
- Manage your subscription via Shopify Billing
We do not sell, rent, or share your data with third parties for marketing purposes.
4. Data storage and security
Your data is stored in a PostgreSQL database hosted on Neon (AWS Europe Central 1, Frankfurt). All connections use TLS encryption. The app is hosted on Vercel with European data routing.
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
5. Data retention
Note data is retained for as long as the app is installed on your store. When you uninstall Smart Notes:
- Your session is immediately invalidated
- All store data (notes, templates) is permanently deleted within 48 hours
- This complies with Shopify's mandatory data deletion requirements
6. GDPR compliance
As a Netherlands-based company, we comply fully with the General Data Protection Regulation (GDPR). Under GDPR, you have the right to:
- Access the data we hold about your store
- Request correction of inaccurate data
- Request deletion of your data
- Data portability (export via our CSV/JSON export features)
- Object to processing
To exercise any of these rights, contact us at info@untapped.nl.
7. Shopify data requests
In compliance with Shopify's Partner requirements, we respond to the following mandatory webhooks:
- Customer data request: We do not store customer personal data in Smart Notes (notes are internal staff annotations, not customer-authored content).
- Customer data erasure: We respond to customer redact requests within 30 days.
- Shop data erasure: All store data is deleted within 48 hours of uninstallation.
8. Cookies
Smart Notes operates entirely within the Shopify Admin iframe and does not use cookies on this website (smartnotes.nl) for tracking or analytics purposes.
9. Third-party services
Smart Notes uses the following sub-processors:
- Vercel: App hosting (vercel.com)
- Neon: Database hosting — AWS Europe Central 1 (neon.tech)
- Shopify: Authentication and billing
10. Changes to this policy
We may update this Privacy Policy from time to time. We will notify merchants of significant changes via the app. The current version is always available at smartnotes.nl/privacy.html.
11. Contact
For privacy-related questions or requests, contact us at:
info@untapped.nl
Untapped B.V., Rotterdam, Netherlands