Privacy Policy

Privacy Policy

Draft for beta review. This policy should be reviewed before public launch or Shopify App Store submission.

What LicenseForge Does

LicenseForge helps Shopify merchants deliver digital product licenses, serial numbers, license keys, protected downloads, license terms, and secure customer portal links after purchase.

Data We Process

To provide license delivery, LicenseForge may process Shopify shop information, product and variant information, order identifiers, order numbers, customer names, customer email addresses, purchased line items, delivery status, license assignment records, download records, IP addresses, and user agent strings.

Why We Process Data

We use this data only to provide app functionality: syncing products, assigning license keys, sending delivery emails, showing customer portal pages, protecting downloads, preventing duplicate license assignment, supporting merchant requests, and maintaining security/audit logs.

Data Minimization

LicenseForge is designed to process the minimum customer data needed to deliver purchased digital goods. License keys and Shopify access tokens are encrypted at rest. License keys are also hashed for secure lookup without storing searchable plain-text keys.

Storage And Security

LicenseForge uses encrypted application storage, webhook signature validation, rate limiting, shop-scoped authorization, private file storage, and secure random customer portal tokens. Customer downloads are served through controlled LicenseForge routes rather than public bucket URLs.

Retention

Merchants should retain license and order delivery records only as long as needed for customer support, legal, tax, fraud-prevention, and digital fulfillment purposes. A future production policy should define exact retention windows.

Data Sharing

LicenseForge may use infrastructure providers such as hosting, database, storage, queue, and email providers to operate the service. LicenseForge does not sell customer personal data.

Contact

For privacy or data questions, contact the merchant that sold the digital product or contact LicenseForge support at the support address configured by the store owner.