BulkRules: MOQ & Quick Order
Privacy policy
Last updated 9 November 2026
This policy explains what information the BulkRules: MOQ & Quick Order app ("BulkRules", "the app") accesses when a Shopify merchant installs it, and how that information is used. The app is developed and operated by Serhii Tymoshyk ("we", "us"). Contact: support@storewrights.com.
Information the app accesses
- Rules you create in the app (which products, minimums, pack sizes, order values, customer tags). They are saved as metafields inside your Shopify store.
- Product information (titles, collections, vendors, product types and tags), so you can choose which products a rule covers and so the rules can be checked.
- Cart contents at checkout and, for signed-in buyers, whether they have the customer tags your rules use, whether they buy for a B2B company, and how many orders they placed before. This is read by the app's Shopify Function, which runs on Shopify's platform; it is not sent to us.
- On your storefront, the app's theme blocks read the current cart, your product catalog and, for a signed-in customer, the same tags and order count, to show rule messages and the quick order form. This happens in the shopper's browser and is not sent to us.
- Store settings such as the store currency and which BulkRules plan your store is on.
The app does not request access to customer records, orders or other personal information through the Admin API, and does not use cookies or tracking. The quick order form keeps the shopper's unsent list in their own browser (local storage) so it isn't lost if they leave the page.
How the information is used
Only to provide the app's features: checking order rules at checkout, showing rule messages, and the quick order form. We do not sell, rent or share merchant or shopper information, and we do not use it for advertising.
Where it is stored
We do not run a database. Rules live in your Shopify store as metafields. The app's admin page runs inside the Shopify admin and talks directly to Shopify. When you open the app, its admin page sends a short-lived Shopify session token to our Cloudflare Worker to confirm the request comes from your store; the token is checked and discarded, not stored.
Shopify's mandatory privacy webhooks (customer data requests, customer redaction and shop redaction) are received by the same Worker on Cloudflare. Because the app stores no personal data, these requests are acknowledged and nothing is kept. Cloudflare may keep short-lived technical logs as described in Cloudflare's own privacy policy.
Billing
Subscriptions are billed through Shopify. We receive the plan your store is on, not your payment details.
Retention and deletion
You can delete rules at any time in the app. If you uninstall the app, it stops processing your store's data, and Shopify removes the app's metafields. Requests to delete store or customer data that Shopify forwards to us are handled automatically; since we hold no copies, there is nothing further to delete.
Your rights
Depending on where you live (for example under the GDPR or CCPA) you may have the right to access, correct or delete personal information. Merchants and shoppers can make such requests through Shopify or by contacting us at support@storewrights.com. We respond within 30 days.
Changes
We may update this policy when the app changes. The date at the top shows the latest version.
Contact
Serhii Tymoshyk · support@storewrights.com