Payment Method Manager — privacy

Operator: InternetRaket, Haefland 8G, 6441 PA Brunssum, The Netherlands. Contact: info@internetraket.com.

This app stores installation sessions, Shopify access and refresh tokens, the shop domain, and account fields supplied by Shopify authentication. These are used only to authenticate the merchant and manage payment rules. Payment-rule configuration is stored in Shopify app-owned metafields.

For paid shops, the app sends the Shopify shop ID and app ID to Shopify’s Partner API to verify subscription status. A background check runs every five minutes. When Shopify confirms that no active subscription remains, the app disables its own active payment rules. API failures are retried without changing checkout rules. Resubscribing does not automatically reactivate rules; the merchant must activate them again. The operator’s own shop and development store are exempt from paid access.

Customer tag membership and company identity are evaluated by Shopify Functions within Shopify. The app server does not store customer profiles, order contents, addresses or payment credentials. It does not process payments or sell data.

Server hosting is on the operator's Debian server. Access is restricted to the operator and authorised maintenance. Installation sessions are deleted on uninstall and on Shopify's shop-redaction webhook; encrypted backups, if configured, must follow the operator's documented retention policy.

Shopify's customer-data request and erasure webhooks are authenticated and acknowledged; no customer records are stored by this app server. Contact the operator for privacy requests, corrections, access or deletion requests and the applicable response procedure.

Last updated: 26 October 2026.