Privacy Policy

Last updated: 21 September 2026

OrderFix ("the App") is operated by Artep tech (Aleksandar Stančević PR Računarsko programiranje Artep tech), Subotica, Serbia — registration no. 68211425, tax ID 115243761 ("we", "us"). The App lets Shopify merchants ("Merchants") allow their customers to change an order (items, quantities, shipping address, or cancel) for a limited time after checkout. This policy describes how we collect, use and share personal information when a Merchant installs the App or a customer uses the edit page. For customer data we act as a processor on the Merchant's behalf; the Merchant is the controller.

Information we collect

When you install the App we receive, through Shopify's APIs, information needed to operate the service:

• Store information: store name, myshopify domain, store owner email, currency, plan type.
• Order information: order number, date, line items, totals, fulfilment and payment status, tags, and the shipping address, for orders placed while the App is installed.
• Customer information: name and email address from the order (to send the edit link and confirmations) and the shipping address the customer enters on the edit page.
• Edit history: what was changed, when, and any amount to collect or refund as a result.

The App never receives or stores card numbers; any additional payment or refund is handled by Shopify.

How we use information

• To decide, using the Merchant's rules, whether an order may still be changed and to apply the customer's changes to the order through Shopify's order editing API.
• To show the customer their order on the edit page and to record the changes for the Merchant.
• To send transactional emails (edit link, change confirmation, payment request) and to notify the Merchant of each change.
• To provide support and to operate, secure and improve the service.

We do not sell personal information and we do not use it for advertising.

Sharing

We share information only with processors needed to run the App: our hosting provider (Fly.io, servers in Frankfurt, Germany) and our transactional email provider (Resend, EU region) for notifications. Each processor acts on our instructions and is bound by data-processing terms. We do not sell personal data. We may disclose information if required by law or to protect our rights.

International transfers

Data is stored in the European Union. Where a processor transfers data outside the EU/EEA, it does so under standard contractual clauses or an equivalent lawful mechanism.

Retention and deletion

Order and edit records are kept while the App is installed so the Merchant can see what customers changed. When a Merchant uninstalls the App, Shopify sends us a shop redaction request and we delete all data for that store within 30 days. Customer data-request and redaction requests received from Shopify are honoured automatically.

Security

Data is transmitted over TLS and stored on access-controlled infrastructure. Access tokens are stored encrypted at rest by the hosting provider and are never exposed to browsers.

Your rights

Depending on where you live (including the EU/EEA, UK and California) you may have the right to access, correct, delete, port or restrict processing of your personal information, and to object to processing or lodge a complaint with a supervisory authority. Customers should contact the Merchant they purchased from; Merchants may contact us at support@arteptech.com. We respond within 30 days.

Children

The App is intended for businesses and is not directed at children under 16; we do not knowingly collect their data.

Changes

We may update this policy; the date above shows the latest version. Material changes will be announced inside the App.

Contact

Artep tech (Aleksandar Stančević PR Računarsko programiranje Artep tech), Subotica, Serbia — registration no. 68211425, tax ID 115243761 · support@arteptech.com