This policy explains what personal data the RentalOps app processes when it is installed on a Shopify store, how and why we process it, how long we keep it, and how it is deleted.
RentalOps is operated by DiLight Entertainment UG (haftungsbeschränkt) ("RentalOps", "we", "us"). For questions about this policy or about the data we process, contact us at privacy@dilight.website.
RentalOps is built so that it does not collect or store your customers' personal data. It never reads customer names, email addresses, phone numbers or postal addresses. The only personal data involved is the merchant's own account and store information (see below), for which we act as the controller. The merchant remains the controller of their customers' data, which stays in Shopify.
RentalOps turns paid Shopify orders into rental bookings and keeps a live availability calendar. To do that it reads and stores only the minimum operational data needed:
.myshopify.com domain, the OAuth access token
issued at install (stored encrypted and never shown to us in plain text in the UI), your plan and billing
status, and app settings (which products are rentable, pool sizes, buffer times, deposit and reminder
configuration).read_customers scope. Webhook payloads that contain a customer object are not read beyond
the order id, order number and line items. Staff-created (walk-in) bookings take an optional order number or
short reference; staff are asked not to enter personal data there.The admin shows where customer data would be used: the bookings table, the new-booking form, the CSV export and
every page's “Data we use” note state that no customer personal data is used. The QR / customer
status page shows a single booking (dates, deposit and pickup information) to whoever holds its unguessable link;
it never enumerates other bookings and shows no customer details. Access to store data is limited to the Shopify
scopes granted at install (read_inventory, read_locations, read_orders,
read_products, write_products).
write_products).Where the GDPR applies, we process data on the basis of performance of a contract (Art. 6(1)(b)) with the merchant and our legitimate interest (Art. 6(1)(f)) in providing and securing the service. We do not process customer personal data; the merchant's own privacy policy and legal basis govern their customers' data, which stays in Shopify.
We do not sell personal data. We share data only with the providers needed to run the service:
Terminal bookings (returned or cancelled) are automatically deleted by a retention sweep after
365 days by default (configurable by the merchant); active and overdue bookings are never
auto-deleted. Aggregated, non-identifying statistics may be kept longer. In general we keep data only as long as
needed to provide the service, and we purge a store's data when the app is uninstalled or on a Shopify
shop/redact request, as described below.
RentalOps implements Shopify's mandatory compliance webhooks (verified by HMAC over the raw request body):
customers/data_request — acknowledged. RentalOps holds no customer personal data, so there is
nothing customer-specific to report; the merchant's own Shopify data is the source for any access request.customers/redact — acknowledged. There is no customer personal data to erase. (Customer names
stored by very early versions have been removed from all bookings.)shop/redact — we purge all of the store's data: bookings, rental items, its billing record,
notification outbox, back-write records, webhook-delivery log entries and recorded compliance requests. This
runs after the store uninstalls the app.Store customers should direct data-subject requests to the merchant (the controller). Merchants can reach us at privacy@dilight.website for assistance.
The app uses Shopify's OAuth for install, verifies inbound webhooks with HMAC signatures over the raw body, stores access tokens encrypted, signs outbound reminder payloads, and serves all traffic over TLS. The customer status page is protected by an App Proxy signature (with an unguessable, rate-limited token fallback). Access to store data is scoped to the permissions granted at install.
The embedded admin relies on Shopify App Bridge session tokens rather than tracking cookies. These marketing pages may set a small preference cookie to remember your chosen language. We do not use advertising cookies.
We may update this policy as the app evolves. Material changes will be reflected on this page with a new "Last updated" date.
DiLight Entertainment UG (haftungsbeschränkt) · privacy@dilight.website · dilight.website