Privacy Policy

Pax Solutions, LLC — Effective May 27, 2026

This Privacy Policy describes how Pax Solutions, LLC (“we”, “us”, or “our”) collects, uses, and protects information when you install and use Deployify (the “App”) from the Shopify App Store.

1. Information We Collect

When you install and use the App, we collect the following information:

• Shopify store domain — used to identify your store and associate your data with your account.
• Theme files — downloaded from your Shopify store solely to perform the backup and deployment operations you configure.
• GitHub metadata — repository names, branch names, and GitHub App installation IDs necessary to connect your repositories to the App.
• Session tokens — short-lived tokens used to authenticate your API requests. Stored server-side in AWS DynamoDB with automatic expiry (TTL). No session data is stored in browser cookies.
• Connected store access tokens — when you connect an additional Shopify store via OAuth, we store that store’s offline access token in AWS DynamoDB. These tokens are used solely to read and deploy themes to that store as part of your configured workflows. Tokens are encrypted at rest and never exposed in API responses.
• Workflow configurations — the CI/CD pipeline graphs, block settings, and store target configurations you create within the App.
• Execution logs — records of workflow runs including timestamps, branch names, commit SHAs, and step outcomes, retained for operational auditing.

We do not collect personal data about your customers, payment information, order history, or any Shopify data outside of theme files and store configuration required to run your workflows.

2. How We Use Your Information

• To provide, operate, and improve the App.
• To execute the CI/CD workflows you configure (checking out theme repos, running builds, deploying themes, creating backups).
• To authenticate your requests and maintain your session.
• To send transactional notifications about workflow executions (if Slack integration is enabled on your plan).
• To respond to support requests sent to erik@paxsolutions.io.

We do not sell, rent, or share your data with third parties for marketing or advertising purposes.

3. Data Retention

Theme backup archives are stored in AWS S3 with automatic lifecycle expiry based on your plan:

• Free: backups are not stored.
• Starter: 14 days.
• Growth: 90 days.
• Scale: 365 days.

All other data (workflows, execution records, GitHub connections, session tokens) is retained while the App is installed and permanently deleted within 30 days of uninstallation.

4. Subprocessors

We use the following third-party services to operate the App:

• Amazon Web Services (AWS), US East (N. Virginia) region — DynamoDB (session and data storage), S3 (theme backups), Lambda (serverless compute), SQS (job queue), CloudFront (CDN).
• GitHub — repository access and webhook delivery via the GitHub App integration you install.
• Slack (optional) — workflow completion notifications, only if you configure a Slack webhook on an eligible plan.

5. Security

All data is encrypted in transit (TLS 1.2+) and at rest using AWS-managed encryption keys. Access to production infrastructure is restricted to authorized personnel. Shopify access tokens (both your primary store and any connected stores) are stored only as required to execute your workflows and are never returned in API responses or logs.

6. GDPR and Merchant Data Rights

We comply with Shopify’s mandatory GDPR webhook requirements:

• Customer data requests: acknowledged. The App does not store Shopify customer personal data.
• Customer data erasure: acknowledged. The App does not store Shopify customer personal data.
• Shop data erasure: all data associated with your store is permanently deleted within 30 days of uninstalling the App.

To request a copy of your data or expedited deletion, contact us at erik@paxsolutions.io.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to request disclosure of the categories of personal information we have collected and the purposes for which it is used. We do not sell personal information. To exercise your rights, contact us at erik@paxsolutions.io.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of material changes by updating the effective date above. Your continued use of the App after any changes constitutes acceptance of the updated policy.

Contact

Pax Solutions, LLC
erik@paxsolutions.io