ShopTech

ShopTech, a product of Zack Dot Solutions LLC

Privacy Policy

Last Updated: July 20, 2026

This Privacy Policy explains how Zack Dot Solutions LLC (“Zack,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with ShopTech (the “App” or “Service”), our website at https://shoptech.app, and the SMS/text-message notifications the Service sends. By installing, accessing, or using the Service, you agree to this Policy.

ShopTech is a software application that service businesses (“Merchants”) install through the Shopify platform to record service items and send text-message notifications to their own customers (“End Customers”). For most End Customer personal data, ShopTech acts as a service provider / data processor that processes information on behalf of, and under the instructions of, the Merchant. The Merchant is the controller of that data and is responsible for its own privacy practices.

1. Information We Collect

a. Information from Merchants

When a Merchant installs or uses the Service, we may collect business contact and account details such as name, business name, email address, phone number, billing information, and the Shopify store identifier, along with configuration and support communications.

b. End Customer information (processed on behalf of Merchants)

To provide the notification functionality, the Service processes a limited set of End Customer personal data entered by the Merchant or their technicians, or accessed through the Shopify APIs under the Merchant’s authorization. We follow a data-minimization approach and only process what is necessary to deliver the Service, which may include:

  • End Customer name;
  • End Customer mobile phone number;
  • service item, order, appointment, or status details relevant to the notification;
  • SMS consent status and opt-in/opt-out records.

c. Information collected automatically

When you use the App or visit our website, we may automatically collect technical and usage data such as IP address, device and browser type, operating system, pages viewed, timestamps, and diagnostic logs. Our website may use cookies and similar technologies for essential functionality and analytics; where required by law, we obtain consent for non-essential cookies.

2. How We Use Information

We use information only for the following stated purposes, and we limit our processing to these purposes:

  • to provide, operate, maintain, and secure the Service;
  • to deliver the text-message notifications requested by the Merchant to their End Customers;
  • to authenticate users, manage accounts, and process billing;
  • to provide customer support and respond to requests;
  • to monitor, troubleshoot, and improve the Service;
  • to detect, prevent, and address fraud, abuse, and security incidents; and
  • to comply with legal obligations and enforce our agreements.

3. SMS / Text-Message Program

ShopTech sends transactional service notifications (for example, service status, appointment, and order-related updates) to End Customers on behalf of Merchants.

Consent

End Customers opt in to receive text messages through the Merchant, typically by giving verbal consent to a Merchant’s technician at the point of service after being read a consent disclosure that identifies ShopTech as the sender. The Merchant records that consent, and the Service maintains opt-in and opt-out records. Consent to receive messages is not a condition of purchasing any goods or services.

Message frequency, rates, and opt-out

  • Message frequency varies based on service activity.
  • Message and data rates may apply, charged by the recipient’s mobile carrier.
  • Recipients can reply STOP at any time to unsubscribe from further messages.
  • Recipients can reply HELP for assistance, or contact us using the details in the “Contact Us” section.
  • Carriers are not liable for delayed or undelivered messages.

No mobile information, including mobile phone numbers, SMS opt-in or consent data, and any related data collected for the text-messaging program, will be shared with third parties or affiliates for marketing or promotional purposes. Zack Dot Solutions LLC does not sell, rent, or lease this information. Text-messaging opt-in data and consent will not be shared with any third parties, and this category of data is excluded from all other use-case sharing described in this Policy.

The only sharing of mobile information that occurs is with subprocessors that help us operate and deliver the messaging service (for example, our telecommunications and SMS delivery provider), strictly to carry out message delivery on our behalf. Those providers are contractually prohibited from using the information for their own marketing or promotional purposes.

4. How We Share Information

We do not sell personal information. We share information only in the following limited circumstances:

  • With the Merchant: End Customer data is made available to the Merchant on whose behalf it is processed.
  • With service providers / subprocessors: vetted vendors that support the Service, such as cloud hosting and infrastructure, our SMS/telecommunications delivery provider, and analytics and support tools, each bound by confidentiality and data-protection obligations and permitted to use data only to provide services to us.
  • With the Shopify platform: as necessary to operate the App within the Shopify ecosystem and in accordance with Shopify’s requirements.
  • For legal reasons: to comply with applicable law, legal process, or lawful government requests, or to protect the rights, property, or safety of Zack Dot Solutions LLC, our users, or others.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to the protections of this Policy.

As stated in Section 3, mobile information and SMS consent are never shared for third-party or affiliate marketing or promotional purposes.

5. Data Retention

We retain personal data only for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. End Customer data processed on behalf of a Merchant is retained according to the Merchant’s instructions and is deleted or redacted upon a valid request or when no longer needed for the stated purposes.

6. Data Security

We implement administrative, technical, and organizational safeguards designed to protect personal data. Personal data is encrypted in transit and at rest, access is restricted on a least-privilege basis, and we maintain monitoring and incident-response practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), including the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. Because we often process End Customer data on behalf of Merchants, End Customers should direct requests to the Merchant; we will assist the Merchant in fulfilling valid requests. You may also contact us directly using the details below, and we will respond as required by applicable law. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we will not discriminate against you for exercising your rights.

8. Data Access and Deletion Requests

We honor data access, deletion, and redaction requests in accordance with applicable law and the Shopify platform’s data-protection requirements. Merchants may submit data subject requests through Shopify or by contacting us, and we support Shopify’s customer data request, customer redaction, and shop redaction processes. Upon a valid request or upon uninstall where required, we delete or de-identify the associated personal data within the timeframes required by law and by Shopify.

9. Merchant Responsibilities

Merchants are independent controllers of their End Customer data and are responsible for maintaining their own privacy policy, obtaining and documenting all necessary consents (including consent to receive text messages), providing required disclosures to End Customers, and complying with applicable laws such as the TCPA, CTIA guidelines, GDPR, and CCPA/CPRA. Merchants must only provide data they are authorized to share and must use the Service in accordance with our Terms of Service.

10. International Data Transfers

We are based in the United States, and personal data may be processed in the United States or other countries where we or our service providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

11. Children’s Privacy

The Service is not directed to children under 13 (or the age defined by applicable local law), and we do not knowingly collect personal data from children. If we learn that we have collected such data, we will delete it.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last Updated” date above and, where appropriate, by additional notice. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

13. Contact Us

If you have questions or requests regarding this Policy or your personal data, contact us at: