Privacy Policy

Last updated October 26, 2026

Who we are

Tidepool Subscriptions is a Shopify app operated by Rick Anderson (Pottery Pro). Questions about this policy can be sent to support@gettidepool.com.

Information we collect

When a merchant installs the app, we receive the store's domain, an access token and basic shop details from Shopify. To run subscriptions we store subscription contract data synced from Shopify, including the subscribing customer's name, email address, phone number and shipping address, the products and schedule of the subscription, and billing attempt results. We do not store full card numbers; payment methods stay with Shopify.

How we use it

We use this information only to provide the app: creating and managing subscriptions, processing scheduled orders and payment retries, showing the customer portal and merchant dashboard, and sending subscription-related notifications. We do not sell personal information or use it for advertising.

Sharing

Data is processed by our service providers solely to operate the app: Vercel (hosting), Supabase (database) and Resend (subscription emails such as renewal reminders and manage links).

Some features send data to services the merchant chooses to connect, and only after they connect them: email marketing tools (Klaviyo, Mailchimp) receive the subscriber's email, name and subscription events; door-access providers (such as Seam, Kisi, Brivo, Salto KS, Verkada, Alta or Group Basic) receive the member's name and email to grant or revoke access; and a merchant-configured webhook receives signed subscription events. Merchants can disconnect these at any time in the app's settings. Integration API keys are encrypted at rest.

We may disclose information if required by law.

Retention and deletion

We keep data while the app is installed. When a merchant uninstalls, we delete their store's session data immediately, and all of the store's data when Shopify sends the shop redaction request (48 hours after uninstall). When Shopify sends a customer redaction request, we remove that customer's name and email from subscription records, cancellation comments, event history and access grants. Merchants or customers can request access to or deletion of their data by contacting us.

Security

Data is transmitted over HTTPS and stored in a managed database with access restricted to the app.

Changes

We may update this policy; the latest version is always on this page.