Payora: Hide Payment Methods helps Shopify merchants hide, rename and reorder the payment methods shown at checkout, based on the products in the cart, the cart total, the delivery address and method, and the buyer and their order history. It can also remind buyers about orders placed with a manual payment method that stay unpaid and cancel those orders.
The app is operated by StoreFleet (Jose James, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA), which is responsible for the data described in this policy. You can reach us at [email protected].
For the data about you and your staff (your shop profile, contact email, support conversations, service emails and usage analytics), StoreFleet decides how it is used and acts as the controller. For the data about your customers that the app handles for you (the Cash on Delivery counters, the customer IDs and recomputation dates, the record of unpaid-order reminders and cancellations, and the privacy requests Shopify forwards), you are the controller and StoreFleet processes that data only on your behalf and only to run the features you switch on.
Your rules and settings, such as the interface language, the default language of renamed payment methods and the payment names counted as Cash on Delivery, are stored in your own Shopify store: as app-owned metafields on your shop and on the payment customization that the app creates in your store. They are not copied to the app's server, except for the rule history described below. Rules contain only what you enter: product tags, collections, product types, vendors, SKUs, countries, regions, postcodes, customer tags, payment method names and the new names you give them.
The app's server stores your shop domain, shop name, granted access scopes, install and uninstall dates and an encrypted access token, so it can keep your installation working.
The server also reads your shop's profile from Shopify when the app is installed and once a day after that, and stores it: shop ID, shop name, myshopify and primary domain, shop URL, the shop owner's email address and the shop's contact email, the shop's country, your Shopify plan (including whether it is a development or Shopify Plus store), when the shop was created and last updated, currency and enabled currencies, money formats, timezone, weight and unit system, tax settings (taxes included in prices, tax on shipping), whether shop setup is complete, the number of products and the shop's primary language. It does not read or store your shop's street address, city, postcode, phone number, company name, map coordinates, the owner's name or the shop description. The profile is sent to our support service, StoreFleet Support Hub, with the install notice and once a day, so our team has this context (plan, country, catalogue size) when answering your support requests and sending the service emails described below.
Once a day the server also sends our support service, StoreFleet Support Hub, a usage summary for your shop: how many rules you have and how many are switched on, how many of those hide, rename or reorder payment methods, how many use the customer's order history, how many come from presets and how many kinds of conditions they use, and whether the app's checkout function is switched on. It contains counts only, never rule names, payment method names, postcodes, tags or any other rule content, and helps us see which features are used.
When Shopify sends a privacy request about one of your customers, the server logs that the request arrived, with the customer and order IDs it names but without the customer's name, email or phone.
Your rules run inside Shopify's checkout as a Shopify Function. To decide whether a rule applies, Shopify gives it the cart lines (product tags, collections, type, vendor, SKU, quantity), the cart subtotal, the delivery country, region and postcode, the selected delivery method, whether the buyer is logged in, whether the buyer has the customer tags your rules name, the logged-in customer's number of orders and total spent, the customer's Cash on Delivery counters described below, whether the buyer checks out for a business (B2B) company, the checkout language and the names of the payment methods offered. This happens on Shopify's servers; none of it is sent to the app's server, stored by the app or shared with anyone, and the app does not keep a record of the checkouts it changed.
The app subscribes to Shopify's order created, updated and cancelled notices, so Shopify sends them to the app's server for every order in your store. Each notice is limited to the fields the app needs: the order ID, the customer ID, the names of the order's payment methods, when it was created, cancelled or closed, and its fulfillment status. It contains no name, email, phone number, address or order lines. The server ignores notices for orders without a customer account, for orders not paid with a payment method you count as Cash on Delivery, and for shops where no switched-on rule in checkout uses the open or cancelled Cash on Delivery order conditions.
For the remaining orders, the server reads that customer's orders of the last 60 days from your store (the same fields as above) and writes two numbers to an app-owned metafield on the customer in your store: how many Cash on Delivery orders are open (not cancelled, closed or fully fulfilled) and how many were cancelled. Notices and orders are processed in memory only and are not stored. To recompute the numbers when an order leaves the 60-day window, the server stores, for each customer whose numbers are not zero, the customer ID and the date of that next recomputation; it stores nothing else about the customer. The server also stores, per shop, whether checkout uses these conditions and the payment names counted as Cash on Delivery. The counters stay in your store, where they are deleted together with the customer.
When you switch on unpaid order handling, the server stores your settings for it (the payment method names, reminder days, the optional message you write for the reminder email, the cancellation settings and the order tags to skip). Once an hour it reads your open orders of the last 60 days whose payment is pending: the order ID and number, when it was created, its payment and fulfillment status, its payment method names and its tags. It contains no name, email, phone number, address or order lines. For orders that match your settings, it adds a reminder tag to the order, asks Shopify to send the buyer your store's order invoice email when you switch that on, and cancels the order when you switch auto-cancel on. Shopify sends these emails from your store; the app never sees the buyer's email address.
For each reminder or cancellation, the server stores the order ID, the order number, the step, its result and Shopify's error message if it failed, so you can see the activity in the app. It stores nothing else about the order or the buyer, and deletes each entry after 90 days.
When you switch on rule health, the server checks your rules once a day against the payment method names on your orders of the last 60 days: it reads each order's creation date and payment method names, and nothing else about the order or the buyer. It stores your switch, the last check's report (rule names, payment method names, dates and counts), when it last saw each payment method your rules target, which findings it already emailed you about, and the email addresses you add for alerts.
On the Pro plan, each time you save your rules the app sends the saved rules to the server, which keeps the latest 50 versions so you can see what changed and restore one. A version contains only your rules and settings as described above, never order or buyer data.
The rule simulator and the product picker read your products (title, SKU, price, type, vendor, tags and collections) inside your browser while you use the app. That data is not sent to or stored on the app's server.
The in-app support chat is run by our support service, StoreFleet Support Hub. When you use it, the app sends the service your messages, your shop domain and shop name, your Shopify plan, the app's granted scopes and install date, and the name, email address, language and role (owner, staff or collaborator) of the staff member who is chatting, as provided by Shopify. The support service stores the conversation, linked to your shop domain, so our team can answer you.
Rule health alerts and other emails the app sends you go to the addresses you add in the app and are sent from our own mail server. Every such email has an unsubscribe link; the server keeps the addresses that unsubscribed so they get no more emails from the app.
Each time the app is installed or uninstalled, and the first time you switch on a rule, the app sends a notice to our support service, StoreFleet Support Hub, which we operate. The notice contains your shop domain and shop name, whether the shop is a development store, the shop owner's email address (or the shop's contact email when the owner's is empty) and the shop's primary language.
We use the email address and language only to send you service emails about the app: a welcome, setup help, tips, questions about your satisfaction and feedback, a request to review the app, and a short note after you uninstall it. Development stores are never emailed. You can opt out at any time with the unsubscribe link in any of these emails or by writing to [email protected].
To see how the app's pages are used and where they are hard to use, the app's pages inside your Shopify admin may use Microsoft Clarity, a product analytics service of Microsoft Corporation that processes the data on our behalf. Clarity records clicks, scrolling, the pages viewed and replays of those visits, together with your shop domain, the app's plan and the browser, device, screen size and approximate location (from the IP address) of the staff member using the app. It runs without cookies, the support chat and the simulator's address and customer fields are masked so their text is never sent, and it never runs in your checkout or storefront. Microsoft keeps session recordings for 30 days and recordings we mark as favorites, plus a sample Microsoft selects at random, for up to 9 months; see the Microsoft Privacy Statement.
Where data protection law such as the EU or UK GDPR applies, we rely on these legal bases:
The app does not sell any data. To answer support chat messages, the support service mirrors them, with your shop domain and shop name, to our support team's Slack workspace (Slack Technologies) and may use an AI model provider (Anthropic) to draft replies. Service emails and the app's emails are sent from our own mail server. Usage analytics of the app's admin pages are processed by Microsoft (Clarity), as described above. Nothing else is shared with third parties.
Slack, Anthropic and Microsoft may process the data they receive from us in the United States and other countries outside the European Economic Area and the United Kingdom. When data about you or your staff leaves the EEA or the UK, we rely on the transfer safeguards these providers offer, such as the European Commission's Standard Contractual Clauses or an adequacy decision. To ask for more information about these safeguards, write to [email protected].
Unpaid order reminder and cancellation entries are kept for 90 days. Your installation record, stored shop profile, Cash on Delivery counter settings and recomputation dates, unpaid order settings, rule health data, saved rule versions, alert email addresses, support conversations and the privacy requests logged for your customers are kept while the app is installed and are deleted when Shopify asks the app to erase your shop's data, 48 hours after you uninstall. The email address and language used for service emails are kept until then as well, and are no longer used for emails once you opt out. The record that your shop's erasure request arrived is kept so we can show that the request was handled. Copies of support messages posted to Slack are kept until you ask us to remove them.
Your customers' privacy requests reach the app through Shopify. When Shopify asks the app for the data it holds about a customer, the app's server holds no personal data about that customer apart from the logged request itself, when the customer has Cash on Delivery counters, the customer ID and the date of their next recomputation, and the reminder and cancellation entries of their unpaid orders of the last 90 days; the counters and any customer tags you typed into a rule are stored in your own store, where you can view and delete them. When Shopify asks the app to erase a customer's data, the server deletes that customer ID and recomputation date, and the reminder and cancellation entries of the orders Shopify names, at once; the logged request is deleted with your shop's data.
Depending on where you are, you may have the right to ask for access to, correction or deletion of the personal data we hold about you, to object to or restrict its use, to receive a copy of it, and to stop service emails at any time. To use these rights, write to [email protected]. You also have the right to complain to your local data protection authority.
When you uninstall the app, Shopify revokes its access and the app's payment customization stops running in your checkout; the installation is marked as uninstalled and the stored refresh token is discarded. 48 hours later Shopify asks the app to erase your shop's data. The server then asks the support service to delete your shop's support conversations, deletes the privacy requests it logged for your customers, deletes the Cash on Delivery counter settings and the customer IDs with their recomputation dates, deletes the unpaid order settings and the reminder and cancellation entries, deletes the rule health data, the saved rule versions and the alert email addresses, deletes your stored shop profile and deletes your installation record. It keeps only a record that your shop's erasure request arrived. Copies of support messages already posted to Slack are not deleted automatically; ask us through the contact below to remove them.
Your rules and settings in the app's metafields contain no personal data about your customers, apart from any customer tags you typed into a rule. The Cash on Delivery counters on your customers contain only the two numbers described above. To remove your rules before uninstalling, delete them in the app.
Questions about this policy or requests about your data can be sent to [email protected], or through the support chat in the app.