This policy explains how AskDone, available at askbox.ai, handles information when merchants use our Shopify application, website, and support channels. AskDone is currently in early access.
Information we process
- Shop and merchant account information supplied by Shopify during installation and authentication.
- Commerce data needed for requested features, such as order identifiers, payment and fulfillment status, totals, cancellation state, and relevant policy settings.
- Configuration, approvals, Case records, and audit events created through AskDone.
- Technical event codes, timestamps, internal Case identifiers, and security states needed to monitor reliability.
- Numeric pilot feedback about setup ease, confidence, and estimated time saved.
- Founding-store applications, including merchant business name, business email, permanent Shopify domain, volume ranges, pilot goal, consent time, and application status.
- Information you send directly through email or support.
How we use information
We use this information to operate and secure AskDone, evaluate support procedures, record evidence, respond to requests, measure the early pilot, improve reliability, and comply with legal obligations. We do not sell merchant or customer data.
Data minimization
AskDone requests only the Shopify data required for an enabled procedure. Current operational events and pilot metrics do not store customer names, email addresses, phone numbers, postal addresses, order contents, or raw error payloads.
Storage and retention
Information may be processed on infrastructure providers used to host AskDone, maintain backups, deliver support email, and monitor reliability. Operational events are automatically deleted after 90 days. Alert spool files are deleted after the host notification relay processes them. Early-access applications that are not accepted are deleted after 180 days of inactivity. Accepted merchant contact details are retained during the pilot. Case and audit evidence is retained while the app is installed unless a shorter period is required or deletion is requested.
Uninstallation and Shopify privacy requests
AskDone responds to Shopify's mandatory privacy webhooks. An authenticated app-uninstalled or shop-redact webhook deletes the affected shop's Cases, settings, operational events, pilot metrics, feedback, and sessions. Merchants can also contact us to request access, correction, or deletion where applicable.
Security
We use access controls, encrypted network connections, restricted credentials, backups, and audit records intended to protect information. No system can guarantee absolute security; we investigate and respond to suspected incidents.
International processing
AskDone infrastructure may process information outside the country where a merchant or customer is located. Where required, we will use appropriate safeguards for international transfers.
Changes
We may update this policy as AskDone develops. The effective date above will change when a material revision is published.
Contact
Questions or privacy requests can be sent to [email protected].