CraftCue privacy policy
Last updated: October 16, 2026
CraftCue processes only the Shopify merchant and order information needed to provide a production checklist for personalized orders.
Information we process
- Shop identity, authorized staff session details, and granted scopes.
- Assigned product IDs, titles, SKUs, and production setup rules.
- Order and line-item IDs, product details, payment and fulfillment status, and personalization values attached to an order.
- Customer artwork and documents uploaded for personalized production.
- For customer approval requests: recipient email entered by the merchant, the details presented for approval, responses, requested changes, and response timestamps.
- Merchant-entered corrections, internal production notes, workflow history, notification email, and synchronization metadata.
How we use information
We use this information to classify production readiness, display and export the production queue, synchronize Shopify order changes, publish personalization fields, send an optional daily digest, and deliver merchant-requested customer approval emails. We do not sell personal information or use it for advertising.
Service providers and international processing
Information is shared only as needed with Shopify, our application and database hosting providers, and Resend when the merchant enables email notifications. These providers may process information in countries other than yours under their own security and privacy commitments.
Retention and deletion
Production records are retained while CraftCue is installed so the merchant has an operational history. Uploaded files are stored in private object storage and are available only to authenticated merchant staff through short-lived download links. Customers who receive a private approval link can view the details and artwork for that item and approve or request changes. Confirmation links expire after seven days and stop working when replaced, when item details change, or when the app is uninstalled. Webhook delivery receipts are kept for 30 days. Uninstalling CraftCue immediately removes app sessions and disables notifications. Production records, setup data, and uploaded files remain available for recovery if the merchant reinstalls before Shopify sends its shop-redaction request, normally 48 hours later. When that request arrives, CraftCue permanently deletes all remaining shop data and uploaded files. Customer redaction requests remove the affected order records and files.
Backups
Merchants can download a portable backup containing production records, setup data, settings, workflow history, and uploaded files. Backup files can contain customer data and should be stored securely. A backup can only be restored to the same Shopify store that created it.
Access and privacy requests
Buyers should first contact the Shopify merchant that received their order. Merchants can download a pending customer-data export from CraftCue Settings. For other privacy questions, email support@krazystack.com.
Security and changes
CraftCue uses authenticated Shopify requests, HTTPS in production, and per-shop data isolation. We may update this policy as the service changes and will revise the date above when we do.