KV Checkout Limits — Privacy Policy

Last updated: 9 October 2026

What the app stores

• Your shop's .myshopify.com domain and the access token Shopify issues at install, so the app can create and update its checkout validation.
• The cart rules you configure (quantity limits, product tags, product and collection identifiers, customer tag names, messages). The rules are also saved to a metafield on your own shop's checkout validation.
• Product and collection titles shown on the rules page.
• The time of the last sync and any sync error message.

What the app reads at checkout

When a customer checks out, the validation runs inside Shopify and reads:

• each cart line's quantity, product and variant identifiers, product title and type, and the product's estimated-arrival metafield;
• whether each product has the product tags, and each variant is in the collections, that your rules name;
• whether the customer has the customer tags your rules name, and their order count;
• the delivery address (to detect PO boxes) and which cart lines ship to it;
• the checkout step.

This data stays inside Shopify's checkout; none of it is sent to or stored by us.

What the app does not store

No customer names, addresses, emails, orders or payment details. Rules are evaluated inside Shopify's checkout; the result is not sent to us.

Data deletion

Uninstalling the app deletes its stored data for your shop within 48 hours (Shopify's shop/redact webhook). Customer data requests and redactions are acknowledged automatically; there is no customer data to return.

Hosting

Cloudflare (Pages and D1), with the checkout validation itself running on Shopify's infrastructure.

Contact

Hong Kong Netizen Limited — support@kidultverse.com