Privacy policy

Team Up is a Shopify app that lets a store run group and team orders through a single shareable link. This policy explains what data the app collects, how it is used, and the choices you have. It applies to merchants who install Team Up and to the shoppers who join a team order.

Information we collect

From the store. When a merchant installs Team Up, we receive the store domain and an access token from Shopify, and we read the products, themes, and draft orders needed to run a team order. We do not read your customers or past orders unless you explicitly grant that access.

From participants. When a shopper joins a team order, we store the name and email they enter, the items and sizes they pick, and their place on the roster. This is the minimum needed to build the production sheet and let the merchant fulfill the order.

Automatically. Like any web service, our servers log basic request data (such as IP address and timestamps) for security and troubleshooting. We do not use advertising trackers.

How we use information

• Run the team order: build the roster and production sheet, and create the draft order in the store.
• Send transactional email, such as an invite to join or a reminder before a deadline.
• Keep the app secure and diagnose problems.
• Answer support requests you send us.

We do not sell personal data, and we do not use it for advertising.

How information is shared

We share data only with the service providers that make the app work, acting on our instructions:

• Shopify, to read products and create orders in your store.
• Cloudflare, which hosts the app and stores its data (Workers, D1, and KV) and delivers our email.

We may also disclose data if required by law. We never share it with anyone else.

Where data is stored

App data lives in Cloudflare's infrastructure. Shopify session tokens are kept in Cloudflare KV, and team-order data (rosters, selections, participant contact details) is kept in a Cloudflare D1 database.

Data retention and deletion

We keep team-order data only while the app is installed. When a merchant uninstalls Team Up, Shopify notifies us and we delete that store's data within 48 hours. A shopper can ask the store to have their personal data removed, and the store can pass that request to us; we honor Shopify's mandatory data-deletion requests automatically.

Your rights

Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you, under laws such as the GDPR and the CPRA. Shoppers should start with the store they ordered through. Merchants and shoppers can also reach us directly at support@team-up.vzlab.net and we will respond within the timeframes the law requires.

Security

Data is transmitted over encrypted connections and stored on Cloudflare's platform. Access to production data is limited to what is needed to operate the app. No system is perfectly secure, but we work to protect your information and to fix issues quickly.

Children

Team Up is a tool for stores and their customers, and is not directed at children under 13. We do not knowingly collect data from them.

Changes to this policy

If we make a material change, we will update the date at the top of this page and, where appropriate, notify merchants in the app. Continued use after a change means you accept the updated policy.

Contact us

Questions about this policy or your data? Email support@team-up.vzlab.net.