Privacy Policy
Mad Valley Productions — Launch Day - Store locks — Effective August 3, 2026
1. Introduction
Mad Valley Productions (“we”, “us”, or “our”) operates the Shopify app Launch Day - Store locks (the “App”). This Privacy Policy explains what information we collect, how we use it, and how we protect it when you install or use the App. The App is built on the Shopify platform and is subject to Shopify’s Privacy Policy in addition to this policy.
2. Age Restriction
The App is intended for use by business merchants and is not directed at individuals under the age of 18. We do not knowingly collect information from anyone under 18.
3. Information We Collect
When you install the App, we collect and store the following information:
- Shop domain and OAuth session data — your Shopify store domain and the access token granted during installation, used to authenticate API requests.
- Lock configuration data — the names, target type (site, page, collection, or product), lock screen message, scheduled unlock times, and store timezone for each passcode lock you create in the App.
- Lock screen images — custom background images you optionally upload for a lock screen (available on paid plans), stored in Cloudflare R2 object storage.
- Subscription and billing metadata — your current plan type and subscription status as returned by Shopify’s Billing platform. We do not store credit card or payment information.
- Partner program contact email — if you apply for or are granted Launch Day - Store locks’ invite-only Partner tier, we store the email address you provide to manage that invite.
We do not collect or store any customer (shopper) personally identifiable information. When a shopper unlocks a passcode-protected page on your storefront, the App only sets an anonymous session cookie confirming the passcode was entered correctly — it never captures a name, email address, or any other shopper identity.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your data on the following legal bases:
- Contract performance — processing your shop domain, OAuth session data, and lock configuration data is necessary to provide the App’s core functionality.
- Contract performance and legal obligation — processing subscription and billing metadata is necessary to manage your subscription and comply with applicable financial recordkeeping requirements.
- Legitimate interests — processing data included in support requests you submit is necessary to respond to and resolve your inquiries.
5. How We Use Your Information
- To provide the App’s core functionality: locking and scheduling the unlock of your collections, products, pages, or storefront.
- To automatically unlock locks at their scheduled time and sync affected products back to your sales channels (e.g. the Shop app and Google Shopping).
- To send you transactional email notifications (e.g. unlock confirmations, Partner tier invites, payment-failure notices) via our email provider.
- To manage your subscription through Shopify’s Billing platform.
- To respond to support requests you submit.
We do not sell, rent, or share your data with third parties for marketing purposes.
6. Data Storage and Security
Your data is stored in the following systems:
- Neon (Postgres) — our primary database, storing your shop record, lock configuration, and subscription data.
- Cloudflare R2 — object storage for custom lock screen images, if you upload one. Images are served via Cloudflare’s global CDN.
- Inngest — a background job platform we use to execute scheduled unlocks and sales-channel syncs at the correct time.
We use industry-standard security practices including HTTPS encryption in transit and access-token based authentication with Shopify’s OAuth 2.0 flow.
7. Data Retention and Deletion
When you uninstall the App, your Shopify OAuth session is deleted immediately. All remaining shop data (locks, Partner tier records, and settings) is permanently deleted within 48 hours of uninstall, via Shopify’s mandatory data-erasure webhook. If you reinstall the App within that 48-hour window, your data — including Partner tier status — is retained rather than deleted.
8. Third-Party Services
The App integrates with the following third-party services, each governed by their own privacy policies:
9. Your Rights (GDPR / CCPA)
Depending on your location, you may have the following rights regarding the data we hold about your store:
- Right to know — what data we collect and how we use it.
- Right to access — a copy of the data we hold about your store.
- Right to correct — inaccurate data we hold about your store.
- Right to delete — request deletion of your data (see Section 7).
- Right to data portability — receive your data in a structured, commonly used format.
- Right to object or restrict processing — object to or request restriction of certain processing activities.
- Right to opt out of sale — we do not sell your data to third parties.
- Right to non-discrimination — exercising your rights will not affect the service you receive.
To exercise any of these rights, contact us at support@madvalley.com. We will respond within 30 days.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated effective date. We will notify you of material changes via an in-app notice or email. Continued use of the App after changes constitutes acceptance of the revised policy.
11. Contact
Mad Valley Productions
PO Box 10345, Bainbridge Island, WA 98110
support@madvalley.com