Privacy policy
Effective date: 2 November 2026
ReminderClerk (reminderclerk.com) is an app for Shopify stores that reminds customers to pay unpaid orders. It is operated by MB Croppick, company code 308104331, registered office Krivių g. 5, LT-01204 Vilnius, Lithuania ("ReminderClerk", "we", "us"). Questions and requests: privacy@reminderclerk.com.
The short version
- We read your store's unpaid orders and the quotes you sent from Shopify and keep a short record of each one: its number, amounts, dates, payment method and where it stands in your reminder plan.
- Reminders are sent by Shopify, as its own invoice email to your customer. We hand Shopify the subject and the text; we never read or store your customers' email addresses.
- We store no customer name, email address, postal address or phone number. A customer's first and last name are read from Shopify when your Home screen shows them or a reminder greets the customer, and are not kept.
- Each reminder links to a payment page for that order. It sets no cookies and uses no tracking.
- No artificial-intelligence processing of any kind by us. Shopify Sidekick, the assistant in your Shopify admin, can read your unpaid orders and reminder settings from ReminderClerk when you or your staff ask it.
- Everything runs on Cloudflare's platform; the database is in Cloudflare's Eastern Europe region.
- We never sell data, never use it for marketing, and show no ads.
- Uninstall the app and everything is deleted, automatically, on Shopify's standard schedule.
Who this policy covers
- Merchants — the store that installs ReminderClerk. For your account data, we are the data controller.
- Customers — the people who owe your store for an order and receive reminders. For their data, you (the merchant) are the controller and ReminderClerk is your processor: we handle it only to remind them of the orders you chose, on your instructions as expressed through the app. The data processing agreement sets out that relationship in full and forms part of the terms.
Why we may process it (legal basis)
For your merchant account data, the basis is the performance of our contract with you (GDPR Article 6(1)(b)). For service logs, security and abuse prevention, it is our legitimate interest in running a reliable, secure service (Article 6(1)(f)). For plan and billing records, it is our legal obligation under accounting law (Article 6(1)(c)). Customer data we process on your instructions as your processor, so the legal basis for it is yours to establish, not ours.
What we collect, why, where, and for how long
| What | Why | Where it is stored | How long |
|---|---|---|---|
| Merchant account — store domain, store name, store contact email, currency, time zone, country, main language and address, your reminder plan and settings (including the bank details you enter and your own wording), plan and billing status, encrypted Shopify API tokens | To run the app for your store and bill through Shopify | Cloudflare D1 database (Eastern Europe region) | While the app is installed; deleted after uninstall (see "Uninstalling") |
| Orders — for each unpaid order or sent quote of the last 60 days: Shopify's id for it and for its customer, the order number, the payment method's name, order and invoice dates, the amount still due and the total, payment terms and their due date, whether it is part-paid or fulfilled, whether Shopify can email the customer, the language of the order and of the customer, its tags no-reminder and customer-says-paid, which reminders went out and when, when the next one is due, and when the customer pressed "I've already paid". No name, email address, postal address, phone or line items | To decide which orders to remind, when, and in which language; to show you where each order stands | Cloudflare D1 | While the order is unpaid; once it is paid, cancelled or gone, 70 days (for the "paid after reminders" figure); all deleted on uninstall |
| Send log — for each reminder, test or cancellation: the order and customer ids, which reminder, when, the outcome, the amount and currency, and the language | To keep the pace of sends, one email per customer per day, and to show you what went out | Cloudflare D1 | 180 days; deleted on uninstall |
| Audit log — operational events (installs, plan changes, cancellations, privacy requests), and a record each time the app reads customers' names from Shopify (the purpose and how many orders, never the names) | Support, and the access log required for Shopify's protected customer data | Cloudflare D1 | A year; deleted on uninstall, except a record that a privacy request was carried out, which holds no personal data |
| Service logs — for each request to the app and each background job: when it ran, what was asked for, how it ended, and the app's diagnostic messages | Finding and fixing faults, and security | Cloudflare Workers Logs | 7 days, then they expire |
We do not collect payment card details (Shopify handles all billing) and we place no advertising or tracking cookies. The embedded app uses Shopify session tokens for sign-in; the website and the payment page use no analytics.
Reminders and the payment page
The reminder email is Shopify's. When a reminder is due, ReminderClerk reads the order from Shopify again, composes the subject and the text — the customer's first name in the greeting, the order number, the amount, your bank details and the link to the payment page — and asks Shopify to send its own "Order invoice" (or "Draft order invoice") email to the customer. Shopify addresses and sends it, from your store's name, with replies going to your store. ReminderClerk never sees the address. For orders in a language other than English without payment terms, the app first gives the order Shopify's "Due on receipt" terms, so Shopify's email shows a date. If you switch on "Copy me", Shopify sends a blind copy to your store's email address.
The payment page (app.reminderclerk.com/pay/…) is one page per order behind a link we sign, so it cannot be guessed. When it opens, it reads the order from Shopify and shows your store's name, the order number, the amount still due, your bank details, a bank QR code where the order's currency allows one and, if you said customers can pay online, a link to Shopify's own page for paying the order. It shows nothing about the customer. If the customer presses "I've already paid", we record the time on the order and add the tag customer-says-paid to the order in Shopify. The page sets no cookies and loads nothing from anywhere else. To limit abuse, each connection may make a limited number of requests a minute; the connection's address is used for that count, in Cloudflare's rate limiter, and is not stored by us.
Where your data lives
ReminderClerk runs entirely on Cloudflare's platform. The database (Cloudflare D1) that holds the data above is located in Cloudflare's Eastern Europe region. Requests are processed by Cloudflare's global edge network in transit, as with any Cloudflare-hosted service.
Who we share data with (subprocessors)
| Subprocessor | What they process | Why |
|---|---|---|
| Cloudflare (hosting, database, logs) | All data in the table above, encrypted in transit | Runs the entire service |
| Shopify | Your store identity and billing events; the subject and text of each reminder, which Shopify sends as its own email; the tags and payment terms the app writes on your orders; and, when you or your staff ask Shopify Sidekick about ReminderClerk, the answers: your unpaid orders by number, amount and status, the reminders sent and due, and your reminder settings. An answer carries no customer's name or address | The platform the app runs on and the sender of every reminder; Sidekick is its admin assistant, and what it does with an answer is Shopify's processing under your agreement with Shopify |
| Google (Google Workspace) | The content of email you send to support@ or privacy@reminderclerk.com — those addresses are mailboxes of our company's Google Workspace account — and our replies | Reading and answering your email |
That is the whole list. There is no AI provider and no email service of ours. We do not sell personal data, share it with data brokers or advertisers, or use customer data for any marketing.
Changes to this list. Before a new subprocessor starts processing your data we update this table and notify you in the app or by email at least 14 days in advance. If you object, you may uninstall before it takes effect, and your data is deleted as described below.
How long we keep data (summary)
- While installed: the records above, for the periods in the table.
- Customer redaction: on a customer data-erasure request relayed by Shopify, we delete the order records and send-log entries of that customer and of the orders Shopify names.
- Uninstalling: uninstalling stops all sending and revokes our access token immediately. Shopify sends the shop-deletion signal about 48 hours later, and on it we delete everything for the store; if that signal does not arrive, we delete it ourselves three days after the uninstall. Tags the app wrote on your orders stay in Shopify until you remove them.
Your rights
Merchants can see and change their data in the app or write to privacy@reminderclerk.com to access, correct, export, or delete anything, or to object to or restrict processing. If you are in the EU/EEA or UK, you also have the right to complain to a supervisory authority. Ours is the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt); you may equally complain to the authority in your own EU/EEA or UK country.
Customers should direct requests to the store they bought from — the store is the controller. ReminderClerk supports the store's obligations automatically through Shopify's mandatory privacy webhooks:
customers/data_request— recorded; what the app holds about the customer's orders is visible to the store in the app, and we assist on request.customers/redact— the customer's order records and send-log entries are deleted.shop/redact— the store's complete data is erased after uninstall.
Security
- Shopify access tokens are stored encrypted (AES-GCM) and never leave the server side.
- All traffic is TLS; webhooks are verified with Shopify's HMAC signatures before anything is processed; payment-page links are signed.
- The app writes to your store only to send reminders, add or remove its two tags, give an order Due on receipt terms, and cancel an order when you switched cancelling on or pressed Cancel order. It never takes a payment.
- The app holds Shopify's protected customer data approval for the customer's name only. It reads the name when it is shown to you or used in a greeting, never stores it, and never requests an email address.
- Every account behind the service (Cloudflare, GitHub, Shopify Partners, the domain registrar) is protected by two-factor authentication, and access is limited to the operator.
International transfers
Primary storage is in Cloudflare's Eastern Europe region. Cloudflare processing is covered by Cloudflare's data-processing addendum, which incorporates the EU standard contractual clauses. Email you send us is kept in Google Workspace, under Google's data-processing terms, which also incorporate the EU standard contractual clauses; Google LLC participates in the EU–U.S. Data Privacy Framework, which covers any processing of that correspondence in the United States.
Children
ReminderClerk is a business tool for merchants and is not directed at children.
Changes to this policy
If this policy changes materially, we will note it here with a new effective date and flag it in the app.
Contact
privacy@reminderclerk.com — or support@reminderclerk.com for anything else.