← Back to TightShip Labs
Privacy Policy
For LeakWatch, a Shopify application operated by TightShip Labs · Last updated: October 21, 2026
LeakWatch is a Shopify application operated by TightShip Labs ("we", "us"). This policy explains what data the app accesses, why, and what we do with it.
What we access
When a merchant installs LeakWatch, Shopify grants the app read-only access to:
- Order and fulfillment data — order status, fulfillment status, line items, and fulfillment/shipping-label status, used solely to detect unused shipping labels approaching their void deadline and orders that are paid but unfulfilled or partially fulfilled.
- Store contact email — used to send the alert digests described below.
LeakWatch is read-only. The app cannot create, modify, or delete orders, fulfillments, products, or customer records, and it never initiates payments or shipments.
What we do not collect
- We do not access or store your customers' payment information.
- We do not sell, rent, or share merchant data with advertisers or data brokers.
- We do not use order data for advertising, profiling, or any purpose other than running the monitoring service for your store.
What we store
For each alert the app generates, we store a record containing the order reference, the type of issue detected, its severity, and when it was detected — so the app does not send duplicate alerts and can show resolved issues. We store your store's domain and the contact email used for alerts. We retain these records while the app is installed.
Alerts
If enabled, LeakWatch sends email digests of newly detected issues to the store contact email (or an address you specify). Alert emails contain order references and issue summaries — the same information visible in the app's dashboard.
When you uninstall
When LeakWatch is uninstalled, we delete your store's session data promptly and delete stored alert records within 30 days, except where retention is required by law. Shopify's mandatory privacy webhooks (customer data request and data erasure) are honored: LeakWatch does not store end-customer personal data beyond what appears in order records processed transiently for detection, and any erasure request routed to us is actioned within the timeframe Shopify requires.
Security
Data is transmitted over encrypted connections (HTTPS/TLS) and stored in access-controlled systems. Access to production data is limited to the operator for support and maintenance.
Contact
Questions about this policy or your data: support@tightshiplabs.com.
Changes
We may update this policy as the app evolves; the current version will always be posted at this URL, and material changes will be noted with a new "last updated" date.