Legal Notice
Application Publisher: Charlie SAS RCS Paris 102 163 060 90 Boulevard de la Tour-Maubourg, 75007 Paris, France President: Ghrenassia & Sons Contact: [email protected] Hosting:- Application: Cloudflare Workers
- Database: Cloudflare D1
- Domain: app.usecharlie.ai
Introduction
This Privacy Policy describes how Charlie (“we”, “our”, or “the App”) collects, uses, and protects information when you install and use our Shopify application. Charlie is a fulfillment and location management app that helps merchants manage multiple store locations and create intelligent order routing rules. This application is subject to French and European regulations, including the General Data Protection Regulation (GDPR - Regulation EU 2016/679) and the French Data Protection Act of January 6, 1978, as amended.Data Controller
The data controller is: Charlie SAS [email protected]Information We Collect
Merchant Information
When you install and use Charlie, we collect:Customer Information
We do NOT directly collect or store personal information from your customers.
- Customer attributes (B2B status, tags) solely for order routing decisions
- Delivery preferences during checkout for location selection
- Order information to determine optimal fulfillment locations
Automatically Collected Information
- Webhook events: Tracking of webhook events (e.g., location updates, inventory changes) for app functionality
- Application logs: Server-side logs for debugging and performance monitoring
- No tracking cookies: We do not use cookies for tracking or analytics purposes
Legal Basis for Processing
We process your data on the following legal bases:Purposes of Processing
We use the collected information to:- Provide core app functionality including location management and order routing
- Synchronize data with Shopify’s platform
- Process fulfillment rules and routing decisions
- Display location maps and validate addresses
- Maintain app sessions and authentication
- Provide checkout UI extensions for customer location selection
- Debug issues and monitor application performance
- Improve app functionality and fix bugs
- Comply with legal obligations
Data Storage and Security
Location and Retention Period
Most business data is stored in Shopify’s platform using metafields—minimal data is stored in Charlie’s database.
Security Measures
We implement industry-standard security measures:- Encrypted connections (HTTPS/TLS)
- Secure authentication tokens via Shopify OAuth
- Regular security updates
- Access controls and monitoring
- Data encryption at rest and in transit
- No storage of sensitive payment information
Third-Party Services
We use the following third-party services:Data Sharing
We do NOT share your data:- We do not sell, rent, or trade your information to third parties
- We do not share your data for marketing purposes
- We do not use your data for purposes other than providing app functionality
- Required by law or legal process
- Necessary to protect rights, safety, or property
- You explicitly consent to such sharing
International Transfers
Data may be transferred outside the European Union only when:- Appropriate safeguards are in place (standard contractual clauses, adequacy decisions)
- The transfer is necessary for contract performance
- Services used have appropriate data protection measures
Your Rights (GDPR)
Under the GDPR, you have the following rights:
To exercise these rights, contact us at: [email protected]
You also have the right to lodge a complaint with your local supervisory authority. For France:
Commission Nationale de l’Informatique et des Libertés (CNIL)
3 Place de Fontenoy - TSA 80715
75334 PARIS CEDEX 07
Tel: +33 1 53 73 22 22
Shopify GDPR Webhooks
We comply with Shopify’s mandatory GDPR compliance webhooks:As we do not store customer personal data, these requests typically return no data.
Cookies and Tracking
- No tracking cookies: We do not use cookies for tracking, analytics, or advertising
- Session management: Authentication is handled through Shopify OAuth without cookies
- No third-party tracking: We do not use Google Analytics, Facebook Pixel, or any advertising/remarketing services
Data Deletion
To delete all your data:1
Uninstall Charlie
Go to your Shopify admin and uninstall the Charlie app.
2
Automatic deletion
This triggers automatic deletion of all Charlie data stored in our database:
- All session data (immediate)
- All webhook event logs (within 48 hours)
- All location configurations, fulfillment rules, and preferences
- All activity logs and export records
Children’s Privacy
Our app is not directed to children under 16. We do not knowingly collect information from children under 16 years of age.Customer Interaction
Your customers may interact with Charlie through:- Checkout UI extensions: For selecting pickup locations or delivery options
- Order routing: Their delivery preferences influence fulfillment decisions
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through:- Email to your registered shop email
- In-app notifications
- Update notices in the Shopify App Store
California Privacy Rights (CCPA)
For California residents:- We do not sell personal information
- You have the right to know what personal information we collect
- You have the right to delete your personal information
- You have the right to opt-out of the sale of personal information (though we do not sell data)
- We will not discriminate against you for exercising your privacy rights
Contact Information
For any questions regarding data protection or to exercise your rights: Email: [email protected] Responsible: Rocco Ghrenassia Company: Charlie SASBy installing and using Charlie, you acknowledge that you have read, understood, and agree to this Privacy Policy.