Create Next App

1. Introduction

This Privacy Policy ("Policy") governs the collection, use, storage, and processing of data by Blocker - IP Country Bot ("the App," "we," "us," or "our"), a Shopify embedded SaaS application designed to provide fraud prevention, visitor security, checkout protection, and suspicious activity management for Shopify stores.

By installing and using the App, you ("Merchant," "you," or "your") agree to the terms of this Privacy Policy. If you do not agree with this Policy, please do not install or use the App.

2. Scope of Policy

This Policy applies to all data processed by the App, including but not limited to data collected from Shopify stores, their customers, visitors, and orders. The App operates as an embedded application within the Shopify platform and processes data in accordance with Shopify's API terms and applicable data protection laws.

3. Information Collected

The App collects and processes the following types of data:

Shopify Store Data: Store ID, store name, store domain, and merchant account information
Order Data: Order IDs, order values, order status, payment information, and transaction details
Customer Data: Customer email addresses, names, shipping addresses, billing addresses, and phone numbers
Visitor Data: IP addresses, geolocation information, browser user-agent strings, device information, and session identifiers
Checkout Data: Checkout attempts, abandoned checkouts, checkout completion status, and checkout timing
Fraud Indicators: Risk scores, suspicious activity flags, VPN/proxy detection results, Tor network detection, and browser fingerprinting data
Analytics Data: Visitor behavior patterns, legitimate vs. blocked visitor statistics, revenue protection metrics, and returning customer analytics

4. Shopify Protected Customer Data Usage

The App accesses and processes Shopify customer data solely for the purpose of providing fraud prevention and security services. We adhere to Shopify's data protection requirements and only access data that is necessary for the App's functionality.

Important: Customer data is never sold, rented, or shared with third parties for marketing purposes. Data is used exclusively for fraud prevention, visitor security, analytics, app functionality, and merchant-requested automation.

5. Visitor Tracking and Analytics

The App tracks visitor activity to identify legitimate users versus potential threats. This includes:

Monitoring IP addresses and geolocation data
Analyzing browser fingerprinting patterns
Tracking session behavior and navigation patterns
Recording checkout attempts and completion rates
Identifying returning visitors and customer patterns

6. Fraud Detection and Security Purposes

All data collected is used for fraud detection and security purposes, including:

Detecting and blocking fraudulent orders
Identifying VPN, proxy, and Tor network users
Blocking suspicious IP addresses and countries
Preventing bot attacks and fake checkouts
Analyzing fraud risk scores and patterns
Protecting against content scraping and unauthorized access

7. Automated Fraud Decision-Making

The App uses automated systems to make fraud prevention decisions, including:

Automatically blocking visitors based on risk scores
Cancelling suspicious orders based on fraud indicators
Applying country-based blocking rules
Enforcing IP address whitelist/blacklist rules

Merchants can configure and override these automated decisions through the App's settings dashboard.

8. How Data Is Used

The App uses collected data for the following purposes:

Fraud Prevention: Identifying and blocking fraudulent activities
Visitor Security: Protecting stores from malicious visitors and bots
Analytics: Providing insights into visitor behavior and fraud patterns
App Functionality: Enabling core features and services
Merchant Automation: Executing merchant-configured rules and workflows
Service Improvement: Enhancing app performance and security features

9. Legal Basis for Processing

Our legal basis for processing personal data includes:

Legitimate Interests: Protecting merchants from fraud and security threats
Contractual Necessity: Providing the services agreed upon in our terms
Legal Obligation: Complying with applicable laws and regulations
Consent: Where explicit consent is provided by the merchant or customer

10. Data Retention

Data is retained for the following periods:

Active Merchant Data: Retained while the merchant actively uses the App
Analytics Data: Retained for up to 12 months for reporting purposes
Fraud Logs: Retained for up to 24 months for security analysis
Deleted Merchant Data: Deleted within 30 days of account termination

11. Data Sharing and Third-Party Services

The App may share data with the following third parties:

Shopify: For app functionality and platform integration
Cloud Infrastructure Providers: For data hosting and processing
Analytics Services: For fraud detection and geolocation services
Integration Partners: For Shopify Flow, Klaviyo, and other merchant-requested integrations

All third-party services are carefully vetted and contractually bound to protect data privacy. Customer data is never sold to third parties.

12. VPN/Proxy and Browser Fingerprinting Disclosures

The App uses the following technologies for security purposes:

VPN/Proxy Detection: Identifying visitors using VPNs, proxies, or Tor networks
Browser Fingerprinting: Collecting device and browser characteristics for identification
IP Analysis: Analyzing IP addresses for geolocation and risk assessment

These technologies are used solely for fraud prevention and security. No personally identifiable information is stored beyond what is necessary for security purposes.

13. Cookies, Scripts, and Analytics Technologies

The App may use cookies and similar technologies for:

Session management and authentication
Visitor tracking and analytics
Fraud detection and security monitoring
Preference and settings storage

14. Data Protection and Security Measures

We implement industry-standard security measures including:

Encryption of data in transit and at rest
Secure authentication and access controls
Regular security audits and penetration testing
Compliance with Shopify's security requirements
Limited access to data on a need-to-know basis

15. Merchant Responsibilities

Merchants are responsible for:

Complying with applicable privacy laws and regulations
Obtaining necessary consents from customers for data processing
Reviewing and configuring App settings appropriately
Maintaining their own privacy policy and customer communications
Responding to customer data requests and inquiries

Merchants remain solely responsible for store operations and customer communications. The App provides tools to assist with fraud prevention but does not replace merchant responsibilities.

16. International Data Transfers

Data may be transferred to and processed in countries other than the merchant's country of residence. We ensure that such transfers comply with applicable data protection laws and include appropriate safeguards.

17. Customer Privacy Rights

Depending on applicable law, customers may have the right to:

Access their personal data
Request correction of inaccurate data
Request deletion of their data
Object to or restrict data processing
Data portability

Customers should direct such requests to the merchant, who is the primary data controller.

18. GDPR/CCPA Considerations

For merchants subject to GDPR or CCPA:

We act as a data processor on behalf of the merchant
We process data based on the merchant's instructions
We implement appropriate technical and organizational measures
We assist merchants with data subject requests as required

19. Policy Updates

We may update this Privacy Policy from time to time. Significant changes will be communicated to merchants through the App or by email. Continued use of the App after changes constitutes acceptance of the updated Policy.

20. Contact Information

For questions regarding this Privacy Policy or data processing practices, please contact us at:

Email: naveen-sharma@jarvisatwork.com
App: Blocker - IP Country Bot

Last Updated: May 2026