Legal

The two documents that govern using Priceflag: the Privacy Policy and the Terms of Service. Both are drafted and pending legal review, so neither is in force yet — they are here to be read before that changes.

Privacy Policy

Last updated: 1 September 2026 · Effective [EFFECTIVE DATE] · Not yet in force

Introduction

Priceflag is a pricing tool for Shopify merchants. It forecasts the likely effect of a price change, releases that change to a growing share of your store's traffic in stages, watches profit-per-visitor against a guardrail you set, and reverts the price automatically if the guardrail is breached. This policy covers the Priceflag Shopify app, the Priceflag web application, and the priceflag.org site. The company behind them is Priceflag Syndicate, Inc., established in Delaware, United States at [REGISTERED ADDRESS].

In this policy, “you” means the merchant, or the person using Priceflag on a merchant's behalf. “Your customers” means the shoppers who buy from your store. Priceflag is a business tool: we do not build shopper profiles, we do not advertise to your customers, and we do not sell data to anyone.

Two roles. For your own account data — your name, work email, the store you connect, billing details, and how you use the app — we are the controller under the GDPR and a business under the CCPA. For the data inside your store — products, prices, inventory, orders, and the limited personal data in order records — you are the controller and we are the processor, handling it on your documented instructions. Shopify is a separate party with its own agreements with you, and nothing here changes those.

Information We Collect

• Account information — your name, work email address, the identifier used to sign you in, the Shopify store domains you connect, and the role each teammate holds in your workspace.
• Billing records — Shopify's App Store rules require app charges to run through Shopify's billing, so your payment card is handled by Shopify and never reaches us.
• Store data read from Shopify — products and variants, titles, SKUs, options, inventory levels, cost of goods where you have recorded it, current and historical prices, orders and line items, store configuration, and traffic and session counts where Shopify exposes them.
• Usage data — the experiments you configure, and every rollout and rollback we execute, plus which screens you open and which features you use.
• Technical data — IP address, browser and device type, coarse location derived from IP, and error traces.
• Support correspondence — anything you send us by email or in-app chat.

Shopify classifies order data as protected customer data, and treats name, address, email and phone as a further tier — protected customer fields — that an app has to request individually and justify. Priceflag's arithmetic works on quantities, prices, margins and counts, so the app is designed to read order data without requesting those fields. The scopes it actually asks for appear on Shopify's install screen before you approve anything, and that screen is the authoritative record of what we can see.

How We Use Your Information

• Run the service: forecasting, staged rollouts, profit-per-visitor calculation, and guardrail rollbacks.
• Write price changes back to your store, only for the products and experiments you have enrolled.
• Notify you when a guardrail is breached, a rollback fires, or an experiment ends.
• Bill you through Shopify, keep account records, and prevent fraud and abuse.
• Debug problems, keep the service secure and available, and improve forecast quality for your store.
• Answer support requests and send service notices. Marketing email goes only to people who asked for it, and every marketing message carries an unsubscribe link.

We do not use one merchant's store data to produce forecasts for another, and we do not train shared models on your data unless you separately and explicitly opt in. Protected customer data is used to deliver the features you switched on and nothing else — Shopify's API terms forbid it, and so does this policy.

Where the GDPR or UK GDPR applies to data we control, we rely on performance of a contract for accounts, experiments, billing and support; legitimate interests for security, abuse prevention, debugging and aggregate usage; consent for marketing email and non-essential cookies; and legal obligation for tax, accounting and lawful requests. For data inside your store, the lawful basis is yours to determine as controller.

Shopify Access and Price Writes

• Priceflag connects through Shopify's standard OAuth install flow. You see the exact permissions before you grant them and can revoke them at any time from your Shopify admin.
• Write access is used to set a price on a product you enrolled in an experiment, and to restore the prior price during a rollback. Nothing else.
• We do not modify orders, customers, fulfilment, discounts, or any field outside the pricing fields an experiment touches.
• Every write is recorded with a timestamp, the experiment that triggered it, and the before and after values. That log is visible to you in the app.
• Uninstalling the app revokes our access instantly. Whatever price is live at that moment stays live, so settle your prices before you uninstall.

Shopify's Privacy Webhooks

Every app in the Shopify App Store has to answer three mandatory compliance webhooks. We verify the HMAC signature on each and reject anything that fails.

• customers/data_request — one of your customers has asked you for the data held about them. We return what we hold to you within the 30 days Shopify allows; you answer your customer.
• customers/redact — you have asked, on a customer's behalf, that their data be erased. We delete or irreversibly redact the identified customer and order records.
• shop/redact — sent 48 hours after you uninstall. We erase the data held for that shop.

Separately, Shopify's API License and Terms of Use require an app to delete every copy of a merchant's data within 30 days of uninstall or termination, except where the law requires us to keep something. We treat that as a hard obligation.

Data Security

We operate the controls Shopify requires of every app handling protected customer data: encryption in transit and at rest, encrypted backups, defined retention periods, separated test and production environments, staff access limited to those who need it, logging of access to protected customer data, strong authentication on staff accounts, and a written incident response process.

We hold no third-party security certification. We are not SOC 2 audited and not ISO 27001 certified, and we will not claim either until it is true. If a certification matters to your procurement process, ask us where we stand before you install.

No system is perfectly secure. If a breach affects personal data we hold, we will notify you without undue delay so you can meet your own obligations as controller, and we will notify regulators where the law requires it — under the GDPR, within 72 hours of becoming aware where the breach is notifiable.

Third-Party Services

We use a small number of vendors to run the service. Each is bound by contract to process data only on our instructions and only to provide their service to us, on terms meeting Article 28 of the GDPR.

• Shopify — the platform your store runs on, the source of the data we read, and the channel through which app subscriptions are billed.
• Cloud hosting and databases — [HOSTING PROVIDER AND REGION].
• Operational vendors — the providers we use for transactional email, error monitoring, product analytics and support. We will name every one of them, and the country each processes in, on request. We will not add a sub-processor that touches store data without updating that list.

Beyond those, we disclose data only where the law compels it, to establish or defend legal claims, to protect the rights and safety of our users or the public, or in a merger, acquisition or sale of assets — in which case we will tell you before your data becomes subject to a different policy. We do not sell personal information and we do not share it for cross-context behavioural advertising, as the CCPA defines those terms. We never have.

How Long We Keep It

• Store, product and order data — while the app is installed and the data is needed to run and evaluate your experiments. After uninstall, deleted within the 30 days Shopify's API terms require.
• Account records — while your account is open, then deleted after a short wind-down window that lets you reinstall.
• Experiment history and price-change logs — kept while you are a customer, exportable at any time, and removed with the rest of your data when you leave.
• Billing and tax records — for the period tax and company law requires, which overrides a deletion request.
• Technical logs and product analytics — for a limited operational period, then deleted or aggregated past the point of re-identification.

Backups expire on their own rotation, so data removed from live systems can persist in backups briefly before being overwritten.

Your Rights

If the GDPR or UK GDPR applies to you, you have the right to access the personal data we hold about you, correct it, delete it, receive it in a portable machine-readable format, restrict or object to processing, object to direct marketing at any time, and withdraw consent you previously gave.

• Much of this is self-service: your data can be exported from the app, and uninstalling the Shopify app stops further collection immediately.
• For anything else, email hello@priceflag.org. We respond within one month, and may extend by two further months for genuinely complex requests — we will tell you inside the first month if that happens. We may need to verify who you are first.
• If the request comes from one of your customers, it belongs to you as controller of that data. Forward it and we will give you what you need, or use Shopify's customers/data_request and customers/redact flows, which reach us automatically.
• You can complain to your data protection authority, whether that is the lead authority in [HOME JURISDICTION] or the regulator where you live or work.

We will not discriminate against you, degrade your service, or charge you more for exercising any of these rights.

California. The CCPA as amended by the CPRA gives California residents the right to know what personal information we have collected and where it came from, to access and delete it, to correct inaccuracies, to receive it in a portable form, and to limit the use of sensitive personal information. Since 2023 these rights cover business-to-business contexts, so they apply to you as a merchant. The categories we collect are identifiers, commercial information and internet activity. We do not sell or share personal information, so there is nothing to opt out of and no “Do Not Sell or Share My Personal Information” link; if that changes we will say so here first. For store data we act as a service provider, never retaining, using or disclosing it for our own purposes. Email hello@priceflag.org to make a request: we confirm within 10 business days and respond within 45 days, extendable once.

International transfers. Our infrastructure runs in [HOSTING PROVIDER AND REGION]. For transfers of EEA, UK or Swiss personal data to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (Decision 2021/914), with the UK International Data Transfer Addendum where UK data is involved, plus a transfer risk assessment and supplementary technical measures. You can request a copy of the clauses we rely on.

Cookies and Tracking

The site and the app use a small number of cookies and similar technologies. Strictly necessary ones keep you signed in, remember your workspace, and protect against cross-site request forgery; these cannot be switched off. Analytics cookies count visits and show which features get used; where consent is legally required for these, we will ask before setting them.

We do not use advertising cookies, cross-site tracking pixels, or any cookie that follows you off our own properties. You can block or clear cookies in your browser, though the app will not function properly without the necessary ones.

Children's Privacy

Priceflag is a business tool sold to merchants. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us data, write to us and we will delete it.

Changes to This Policy

We will update this policy as the product changes and as the law does. The date at the top always reflects the current version. For changes that materially affect how we handle your data we will give notice by email or in the app before they take effect, and where the law requires consent we will ask for it.

Contact Us

Questions about this policy, or a privacy request under it: hello@priceflag.org. Postal mail, signed data processing agreements, copies of our Standard Contractual Clauses and the current sub-processor list: Priceflag Syndicate, Inc., [REGISTERED ADDRESS].

Terms of Service

Last updated: 1 September 2026 · Effective [EFFECTIVE DATE] · Not yet in force

Agreement to Terms

These terms are a contract between you and Priceflag Syndicate, Inc.. You accept them by installing the app on a Shopify store, creating an account, or using the service in any way. If you accept on behalf of a company, you confirm you are authorised to bind it, and “you” means that company. If you do not agree, do not install the app.

The Privacy Policy above is part of this agreement and is incorporated by reference. Your separate agreements with Shopify continue to apply, and nothing here overrides them.

Description of Service

Priceflag helps Shopify merchants change prices deliberately. It forecasts the likely effect of a proposed price change from your historical product, pricing and order data; releases a new price to a growing share of your store's traffic in the stages you configure; tracks profit-per-visitor against a guardrail threshold you set; and reverts the price to its previous value automatically if that guardrail is breached.

A forecast is a statistical estimate from past data. It is not a guarantee, not a prediction of revenue, and not advice about what you should charge. What actually happens depends on seasonality, competitors, inventory, marketing and a great many things Priceflag cannot observe. We may add, change or remove features as the product develops; if we materially reduce functionality you depend on, we will give you reasonable notice first.

Eligibility

You must be at least 18, capable of forming a binding contract, and operating a genuine business. You must have an active Shopify store and the authority to change prices on it.

Account Registration

• You are responsible for the accuracy of what you tell us and for keeping it current — cost of goods in particular, since every margin calculation runs off it.
• You are responsible for your credentials and for everything done under your account, including by teammates you invite. Tell us promptly at hello@priceflag.org if you suspect unauthorised access.
• We may refuse, suspend or close an account where we reasonably believe these terms have been broken or where continuing would expose us to legal risk.

Your Prices Remain Your Responsibility

This is the most important section on the page, so it is stated plainly.

• Every price is your decision. You choose the products, the candidate prices, the traffic percentages, the stage schedule and the guardrail. Priceflag executes the configuration you approved. You remain solely responsible for what you charge and for every commercial consequence of it.
• Pricing-law compliance is yours. That covers consumer protection and price-display rules, reference-price and strikethrough-discount rules such as the EU Omnibus Directive and comparable US state laws, advertising standards, sales tax and VAT treatment, promotion and coupon law, marketplace and sales-channel policies, price-parity commitments you have made, and any obligation to price consistently across markets. We do not review your prices for legality and are not able to.
• Personalised pricing has its own rules. Some jurisdictions require disclosure when a price has been set by automated means, and some prohibit differentiating price on protected characteristics. Configuring Priceflag in a way that touches those rules is your call and your responsibility.
• Check what you launch. Confirm cost data, currency, market and product selection before an experiment starts. A wrong input becomes a wrong price on a live storefront within minutes.
• Watch your own store. Priceflag is an instrument, not a substitute for paying attention. Know how to set a price back by hand in Shopify.

What Automation Can and Cannot Promise

Guardrail monitoring and automatic rollback are the features merchants rely on most, so it is worth being exact about what they depend on. Each of these can fail, and a failure means a price stays live when you expected it to be pulled.

• Data has to arrive. Guardrails are evaluated from order and traffic data supplied by Shopify. If Shopify's API is slow, rate-limited, degraded or reporting late, a breach can go undetected until the data catches up.
• Our systems have to be running. An outage, a deploy problem or a bug on our side can delay or prevent a rollback.
• We have to still hold write access. If the app is uninstalled, its permissions revoked, or its access token invalidated, we cannot write any price at all — including a rollback.
• Small samples are noisy. At 5% of traffic a guardrail may fire on ordinary variance, or fail to fire on a real decline, simply because too few visitors have been through. Confidence improves as the rollout widens; it is never absolute.
• Other systems change prices too. Bulk edits, other apps, sales channels, discount rules and manual admin changes can move a price out from under an experiment. Priceflag records what it wrote, not what everything else wrote.

We commit to building these mechanisms carefully and to telling you when they fail. We do not and cannot warrant that a guardrail breach will always be detected or that a rollback will always execute.

Prohibited Uses

You may not, and may not permit anyone else to:

• use the service unlawfully, or present prices in a way that deceives shoppers;
• coordinate pricing with competitors, or otherwise facilitate collusion, resale price maintenance or any other anti-competitive conduct;
• connect a store you are not authorised to manage, or feed in data you have no right to use;
• reverse engineer, decompile, scrape or attempt to derive our models or source code, except where that restriction is unenforceable;
• resell, sublicense, white-label or provide the service to third parties as your own product without our written agreement;
• probe, load-test or interfere with the service or its infrastructure, or circumvent usage limits, rate limits or security controls;
• upload malware, or anything infringing or unlawful.

We may investigate suspected breaches and suspend access while we do. Where suspension is not urgent, we will tell you first.

Fees and Payments

• Shopify requires App Store apps to charge through Shopify's own billing, so your Priceflag subscription is billed by Shopify alongside your Shopify invoice. We never see your card.
• The plan, price and any free trial are shown in our Shopify App Store listing and again in the app before you subscribe. Those screens are authoritative.
• Subscriptions renew automatically until cancelled. Cancellation takes effect at the end of the current billing period, and you keep access until then.
• Fees are non-refundable except where the law requires otherwise or we agree in writing.
• Prices exclude taxes. You are responsible for any sales, use, VAT or similar tax, other than tax on our income.
• We may change our prices with at least 30 days' notice before your next renewal. If you do not want the new price, cancel before it takes effect.
• If a charge fails we may suspend the service after reasonable notice. Suspension does not undo prices already live on your store, and it stops guardrail monitoring. You remain responsible for whatever is live.

Your Data

It stays yours. Your store data, product and order records, and the experiment configurations you create belong to you. You grant us a limited licence to host, process, transmit and display that data solely to operate the service for you and as described in the Privacy Policy above.

We act on your instructions. For the personal data inside your store we are a processor and you are the controller. We will process it only to provide the service, assist you with data subject requests, and honour Shopify's mandatory compliance webhooks. If you need a signed data processing agreement, ask at the address below.

Aggregated statistics. We may produce de-identified, aggregated statistics that cannot reasonably be linked back to you, your store or your customers, and use them to improve and describe the service. We will not publish anything that discloses your individual prices, costs, margins or performance.

Deletion. Shopify's API terms require us to delete every copy of your data within 30 days of uninstall or termination, except where law requires retention. Export anything you want to keep before you go. If you send us suggestions we may use them freely, without obligation or payment to you.

Intellectual Property

The service — the software, the forecasting models, the interface, the documentation, and the Priceflag name and marks — belongs to us and our licensors. We grant you a limited, non-exclusive, non-transferable, revocable right to use it while your account is in good standing and you comply with these terms. No rights are granted beyond that, and nothing here transfers ownership of anything.

Shopify and Other Dependencies

Priceflag runs on Shopify and cannot work without it. Your use of Shopify is governed by your agreement with Shopify, not by us. We are not responsible for Shopify's availability, API behaviour, rate limits, data accuracy, deprecations or platform changes, and any of those can stop forecasts, rollouts, guardrail monitoring or automatic rollbacks from working.

• You are responsible for keeping your Shopify account in good standing and for the permissions you grant the app.
• Uninstalling revokes our access immediately. Any price live at that moment stays live, because write access is gone. Return your prices to where you want them before you uninstall.
• The same is true if you revoke the app's scopes, change store ownership, or close and reopen the store.
• The service also relies on the other providers described in the Privacy Policy above. Their own terms govern their own services.

Availability and Support

We aim to keep the service available continuously, but we do not offer a service level agreement or an uptime guarantee, and we may take the service down for maintenance. Where maintenance is planned and likely to interrupt an active experiment, we will give notice in the app. Support runs by email at hello@priceflag.org during business hours. We try to answer quickly and do not promise a response time.

Disclaimer of Warranties

To the fullest extent the law permits, the service is provided “as is” and “as available”, without warranties of any kind, express, implied or statutory, including merchantability, fitness for a particular purpose, title, accuracy and non-infringement.

We do not warrant that the service will be uninterrupted, timely, secure or error-free; that any forecast will prove accurate; that a guardrail breach will always be detected; that a rollback will always execute or execute in time; or that using Priceflag will increase your revenue, margin or profit. Priceflag is a tool. It is not financial, tax, legal, accounting or investment advice. Some jurisdictions do not allow certain exclusions, so parts of this section may not apply to you.

Limitation of Liability

To the fullest extent the law permits, neither party is liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, lost revenue, lost margin, lost sales, lost goodwill, business interruption or lost data, even if warned such losses were possible.

Our total aggregate liability arising out of or relating to these terms or the service will not exceed the greater of [LIABILITY CAP] and the fees you paid us in the twelve months immediately before the event giving rise to the claim. Nothing here limits liability that cannot lawfully be limited, including for fraud, wilful misconduct, or death or personal injury caused by negligence. These limits reflect an allocation of risk that both parties accept, and the fees are set on that basis.

Indemnification

You will defend, indemnify and hold harmless Priceflag and its officers, employees and agents against any third-party claim, and any resulting loss, liability, damages, cost and reasonable legal fees, arising from the prices you set, your use of the service, the data you connect to it, your breach of these terms, or your violation of any law or third-party right. We will notify you promptly of any such claim, give you reasonable control of the defence, and cooperate at your expense. You may not agree a settlement that imposes any obligation or admission on us without our written consent.

Termination

• These terms apply from your first use of the service until they are terminated.
• You may leave at any time by cancelling your plan and uninstalling the app from Shopify.
• We may suspend or terminate access for breach, non-payment, legal risk or prolonged inactivity — with notice where practical, and immediately where the circumstances require it.
• Settle your prices before you leave. Termination and uninstall both stop guardrail monitoring and automatic rollback. Whatever price is live at that moment stays live on your storefront until you change it yourself in Shopify. There is no automatic restore on exit.
• On termination your right to use the service ends, and we handle your data as set out above. The sections on your prices, automation, your data, intellectual property, disclaimers, liability, indemnification and governing law survive termination, along with any other provision that by its nature should.

Changes to Terms

We may update these terms as the service changes and as the law does. The date at the top reflects the current version. For material changes we will give at least 30 days' notice by email or in the app. Continuing to use the service after a change takes effect means you accept it; if you do not, cancel and uninstall before then.

Governing Law

These terms are governed by the laws of [GOVERNING LAW AND VENUE], without regard to conflict-of-law rules, and the courts there have exclusive jurisdiction — subject to any mandatory rights you hold where you live or trade. Before filing anything, email hello@priceflag.org with a description of the dispute and what you want, and give us 30 days to work it out in good faith. That period does not limit either party from seeking urgent injunctive relief.

General

• These terms and the Privacy Policy are the entire agreement between us on this subject and replace anything said or written earlier.
• If a provision is held unenforceable, it is narrowed to the minimum extent necessary and the rest stays in force.
• Not enforcing a right is not a waiver of it.
• You may not assign these terms without our written consent. We may assign them to a successor in a merger, acquisition or sale of substantially all assets.
• Neither party is liable for delay or failure caused by events beyond its reasonable control, including platform outages at Shopify.
• Nothing here creates a partnership, joint venture, agency or employment relationship, and there are no third-party beneficiaries.
• Notices to you go to the email on your account. Notices to us go to the addresses below.

Contact Us

Questions about these terms, or anything on this page that looks wrong: hello@priceflag.org. Formal legal notices: Priceflag Syndicate, Inc., [REGISTERED ADDRESS].