GATEHOUSE - PRIVACY POLICY

Gatehouse ("Gatehouse", "we", "us") is a Shopify application that provides
branded, passwordless sign-in for Shopify customer accounts and a fully audited
"log in as customer" capability for store staff. This policy explains what data
Gatehouse processes, why, how long we keep it, and who we share it with.

Gatehouse is operated by Shopifactory (shopifactory.com). Where a signed
agreement with a merchant conflicts with this policy, that agreement governs.


1. OUR ROLE

When a Shopify merchant installs Gatehouse, the merchant is the controller of
its customers' personal data and Gatehouse acts as a processor on the merchant's
behalf - processing shopper data only to provide the sign-in service the merchant
configured. For the limited operational data we need to run and secure the
service (such as installation records and security logs), we act as a controller.


2. WHOSE DATA WE PROCESS

- Merchants: the Shopify store and the staff who install and operate Gatehouse.
- Shoppers: the store's customers who sign in through Gatehouse.


3. WHAT WE COLLECT AND WHY

Merchant / store data (received from Shopify at install):
- Your store's Shopify identifier and the app installation record - to identify
  the store and set up its Gatehouse account.
- A temporary Shopify access credential used once during installation to read
  your store's basic details. It is not stored.
- Store branding you configure (display name, logo, colors) - to render your
  branded login page and emails.

Shopper data (to authenticate sign-in):
- Email address - the identifier a shopper signs in with.
- First and last name - processed on first sign-in to populate the shopper's
  Shopify customer account, when available.
- An internal identifier and account status (active / blocked).
- One-time email codes and sign-in tokens - kept only in protected form and
  short-lived.

Security and usage logs:
- Limited technical and activity information (such as sign-in events and device
  and connection details) kept to operate and secure the service and to give
  store owners an audit trail of staff activity.

We do NOT collect payment card numbers, passwords, or government IDs. Gatehouse
is passwordless - there is no password to store or reset.


4. COOKIES

Gatehouse sets only strictly necessary cookies required to complete a sign-in
session on the login page. We do not use advertising or third-party tracking
cookies.


5. HOW LONG WE KEEP IT

- Shopper identity (email, name, identifier, status): kept while the merchant
  uses Gatehouse, until deleted on app uninstall or on a data-deletion request.
- Usage / audit log: automatically deleted after 14 days.
- One-time codes and sign-in tokens: retained only as long as needed to complete
  and secure a sign-in - from minutes up to a few weeks - then deleted.


6. SERVICE PROVIDERS

We do not sell personal data and do not share it for advertising. We rely on a
small number of trusted service providers to operate Gatehouse - for example,
cloud hosting and email delivery. They may process personal data only on our
instructions, solely to provide those services to us, and are bound by
confidentiality and data-protection obligations. Gatehouse also integrates with
Shopify, which processes data as part of the platform you use. A current list of
our sub-processors is available on request.


7. SECURITY

We protect personal data using industry-standard safeguards, including encryption
in transit and at rest, storing credentials and sign-in tokens only in hashed or
encrypted form, strict access controls on production systems, and least-privilege
access. No method of transmission or storage is completely secure, but we work to
protect your data and review our practices regularly.


8. YOUR RIGHTS AND DELETION

Shoppers should direct access or deletion requests to the store they shop with;
as the store's processor, we act on the store's instructions. Gatehouse supports
Shopify's standard data access and deletion (redaction) requests: when your store
or Shopify sends such a request, or when the app is uninstalled, the associated
personal data is deleted. You may also contact us directly at
support@shopifactory.com.


9. INTERNATIONAL TRANSFERS

Gatehouse is operated from the United States and processes and stores data there.
If you access the service from another country, your data will be transferred to
and processed in the United States to provide the service.


10. CHANGES

We may update this policy as the product changes. Material changes will be
reflected on this page.