Skip to main content
Last Updated: September 12, 2026 Application Publisher: Charlie SAS RCS Paris 102 163 060 90 Boulevard de la Tour-Maubourg, 75007 Paris, France President: Ghrenassia & Sons Contact: [email protected] Hosting:
  • Application: Cloudflare Workers
  • Database: Cloudflare D1
  • Domain: charlie.autrement.workers.dev

​
Introduction

This Privacy Policy describes how Charlie (“we”, “our”, or “the App”) collects, uses, and protects information when you install and use our Shopify application, and when you visit our website at usecharlie.ai. Charlie is a fulfillment and location management app that helps merchants manage multiple store locations and create intelligent order routing rules. This application is subject to French and European regulations, including the General Data Protection Regulation (GDPR - Regulation EU 2016/679) and the French Data Protection Act of January 6, 1978, as amended.

​
Data Controller

The data controller is: Charlie SAS [email protected]

​
Information We Collect

​
Merchant Information

When you install and use Charlie, we collect:

​
Customer Information

We do NOT directly collect or store personal information from your customers.
However, we may process:
  • Customer attributes (B2B status, tags) solely for order routing decisions
  • Delivery preferences during checkout for location selection
  • Order information to determine optimal fulfillment locations
No customer personal data is stored in our database.

​
Automatically Collected Information

  • Webhook events: Tracking of webhook events (e.g., location updates, inventory changes) for app functionality
  • Application logs: Server-side logs for debugging and performance monitoring
  • Website cookies: our website sets analytics and chat cookies only after you accept them. The app itself sets none. See Cookies and Tracking
We process your data on the following legal bases:

​
Purposes of Processing

We use the collected information to:
  • Provide core app functionality including location management and order routing
  • Synchronize data with Shopify’s platform
  • Process fulfillment rules and routing decisions
  • Display location maps and validate addresses
  • Maintain app sessions and authentication
  • Provide checkout UI extensions for customer location selection
  • Debug issues and monitor application performance
  • Improve app functionality and fix bugs
  • Comply with legal obligations

​
Data Storage and Security

​
Location and Retention Period

Most business data is stored in Shopify’s platform using metafields—minimal data is stored in Charlie’s database.

​
Security Measures

We implement industry-standard security measures:
  • Encrypted connections (HTTPS/TLS)
  • Secure authentication tokens via Shopify OAuth
  • Regular security updates
  • Access controls and monitoring
  • Data encryption at rest and in transit
  • No storage of sensitive payment information

​
Third-Party Services

We use the following third-party services:
We do not use any third-party advertising or remarketing services. Analytics services in the app (Sentry, PostHog) receive only operational data and shop-level interaction events: no customer PII, no merchant business data. On the website, Google Analytics and Intercom run only after you accept them.

​
Data Sharing

We do NOT share your data:
  • We do not sell, rent, or trade your information to third parties
  • We do not share your data for marketing purposes
  • We do not use your data for purposes other than providing app functionality
We may share information only when:
  • Required by law or legal process
  • Necessary to protect rights, safety, or property
  • You explicitly consent to such sharing

​
International Transfers

Data may be transferred outside the European Union only when:
  • Appropriate safeguards are in place (standard contractual clauses, adequacy decisions)
  • The transfer is necessary for contract performance
  • Services used have appropriate data protection measures
Google LLC (Google Analytics) and Intercom, Inc. (chat) are based in the United States. Both are certified under the EU-US Data Privacy Framework, which the European Commission recognised as providing adequate protection on 10 July 2023, so transfers to them rely on that adequacy decision.

​
Your Rights (GDPR)

Under the GDPR, you have the following rights: To exercise these rights, contact us at: [email protected] You also have the right to lodge a complaint with your local supervisory authority. For France: Commission Nationale de l’Informatique et des Libertés (CNIL) 3 Place de Fontenoy - TSA 80715 75334 PARIS CEDEX 07 Tel: +33 1 53 73 22 22

​
Shopify GDPR Webhooks

We comply with Shopify’s mandatory GDPR compliance webhooks:
As we do not store customer personal data, these requests typically return no data.

​
Cookies and Tracking

​
In the app

  • No tracking cookies: the app does not use cookies for tracking, analytics, or advertising
  • Session management: authentication is handled through Shopify OAuth without cookies

​
On our website

Our website at usecharlie.ai asks for your choice before setting any cookie that is not strictly necessary. Nothing from Google or Intercom is loaded until you accept, and refusing takes the same single click as accepting. Your choice is kept for six months, then we ask again. The consent cookie is strictly necessary and is set whichever way you choose. Every other cookie in the table is set only after you accept. You can change or withdraw your choice at any time from the Cookies link in the website footer. Withdrawing stops Google Analytics and Intercom immediately and removes the cookies they set. Google Analytics does not record your IP address: it is dropped before any data is logged, and traffic from the European Union is processed on servers in the European Union. We use no advertising or remarketing service anywhere.

​
Data Deletion

To delete all your data:
1

Uninstall Charlie

Go to your Shopify admin and uninstall the Charlie app.
2

Automatic deletion

This triggers automatic deletion of all Charlie data stored in our database:
  • All session data (immediate)
  • All webhook event logs (within 48 hours)
  • All location configurations, fulfillment rules, and preferences
  • All activity logs and export records
Metafield values written to Shopify (inventory levels, safety stock, location tags) remain in your Shopify store since they belong to you and are accessible via the Shopify Admin API.
Data deletion is permanent and cannot be reversed.

​
Children’s Privacy

Our app is not directed to children under 16. We do not knowingly collect information from children under 16 years of age.

​
Customer Interaction

Your customers may interact with Charlie through:
  • Checkout UI extensions: For selecting pickup locations or delivery options
  • Order routing: Their delivery preferences influence fulfillment decisions
We process this information solely to fulfill orders according to your configured rules.

​
Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through:
  • Email to your registered shop email
  • In-app notifications
  • Update notices in the Shopify App Store
Continued use of the app after changes constitutes acceptance of the updated policy.

​
California Privacy Rights (CCPA)

For California residents:
  • We do not sell personal information
  • You have the right to know what personal information we collect
  • You have the right to delete your personal information
  • You have the right to opt-out of the sale of personal information (though we do not sell data)
  • We will not discriminate against you for exercising your privacy rights

​
Contact Information

For any questions regarding data protection or to exercise your rights: Email: [email protected] Responsible: Rocco Ghrenassia Company: Charlie SAS
By installing and using Charlie, you acknowledge that you have read, understood, and agree to this Privacy Policy.
Last modified on September 12, 2026