Security and data
How our apps handle your store's data
What Music City Labs apps read from Shopify, what they keep, how it's protected, and when it's deleted. Each app's privacy policy has the full detail for that app.
Access to your store
Our apps connect through Shopify's standard install flow. Shopify shows you every permission an app asks for before you approve it, and we request only the permissions a feature uses. Where an app only needs to read, it only reads: Packtally, for example, has no permission to change anything in your store.
What we keep
- Only the fields a feature uses. We never store payment details.
- Customer contact details only when a feature can't work without them. Roadcase keeps a shopper's email address and first name so it can send that shopper's shipping emails, and deletes them 90 days after delivery. Packtally keeps only the state and country an order shipped to.
- Store data is never sold, never used for advertising, and never used to contact your customers about anything else.
How it's protected
- All traffic uses TLS.
- Sensitive fields, such as shopper email addresses and mailbox sign-ins, are encrypted at rest with AES-256-GCM.
- Production databases run on encrypted volumes with daily encrypted snapshots.
- Production data is never copied to development. Development uses sample stores and sample orders.
- Where an app records who reads protected fields, every read is logged with who, what and why.
Where it lives
Our apps and this website run on Fly.io servers in the United States. App emails are sent through Resend, or through the merchant's own mailbox when they connect one. Features that use AI call Anthropic's Claude API and send only what that feature needs, never shopper contact details.
Retention and deletion
- Every app answers Shopify's required privacy requests: customer data requests, customer erasure and shop erasure.
- When you uninstall, the app stops working on your store, and your store's data is deleted when Shopify sends its shop erasure request, 48 hours after uninstall.
- Data with a shorter useful life is deleted sooner, on the schedule in each app's privacy policy.
Who can reach it
Only the founder has access to production systems: hosting, source code, the Shopify Partner Dashboard and email sending. Every one of those accounts uses a unique password and two-factor authentication.
If something goes wrong
Our incident policy is to contain a problem within an hour of discovering it, then tell affected merchants and Shopify without undue delay, and within 72 hours of confirming a breach of personal data, with what happened, what data was involved and what to do next.
Report a security issue
Email support@musiccitylabs.co with "Security report" in the subject. Please include how to reproduce the issue and give us a chance to fix it before sharing it publicly. We'll reply, keep you updated and credit you if you'd like.
App by app
| App | Reads from Shopify | Customer details kept | Policy |
|---|---|---|---|
| Whittle | The store content it audits and fixes, such as products, collections, pages and blog posts | See policy | Whittle privacy |
| Packtally | Orders (dates, items, quantities, ship-to state and country), products and locations. Read only. | None: no names, emails, phone numbers or street addresses | Published before launch |
| Roadcase | Orders, fulfillments and tracking, products and shipping reports | Shopper email and first name, encrypted, deleted 90 days after delivery | Roadcase privacy |
| Keyholder | In development. Its data use will be listed here before it opens to stores. | Published before launch | |