Privacy Policy

Last updated: 23 September 2026

Datebox ("the App") is operated by Artep tech (Aleksandar Stančević PR Računarsko programiranje Artep tech), Subotica, Serbia — registration no. 68211425, tax ID 115243761 ("we", "us"). The App lets Shopify merchants ("Merchants") offer their customers a delivery or pickup day, and refuses orders for days the Merchant cannot serve. This policy describes how we collect, use and share information when a Merchant installs the App and when an order carries a chosen date. For that order data we act as a processor on the Merchant's behalf; the Merchant is the controller.

Information we collect

When you install the App we receive, through Shopify's APIs, information needed to operate the service:

• Store information: store name, myshopify domain, store owner email, plan type.
• Order information: for orders that carry a chosen day, the order's id and number, the date, the time slot, whether it is a delivery or a pickup, and which of your locations it belongs to.
• Customer name: the name on that order, so your day list says whose order is due. We store no email, phone, address or payment information.
• Your rules: your locations, open days, holidays, cut-off, capacity and time slots.

The App never receives card numbers, and it does not read the contents of an order beyond what is listed above.

How we use information

• To publish the days you can serve to your storefront, and to let Shopify's checkout refuse the days you cannot.
• To show you a calendar of what is due, and to tag each order with its date so you can find it in Shopify.
• To email you when something needs your attention, if you asked for that.
• To provide support and to operate, secure and improve the service.

We do not sell personal information and we do not use it for advertising.

Sharing

We share information only with processors needed to run the App: our hosting provider (Fly.io, servers in Frankfurt, Germany) and our transactional email provider (Resend, EU region) for notifications. Each processor acts on our instructions and is bound by data-processing terms. We do not sell personal data. We may disclose information if required by law or to protect our rights.

International transfers

Data is stored in the European Union. Where a processor transfers data outside the EU/EEA, it does so under standard contractual clauses or an equivalent lawful mechanism.

Retention and deletion

Bookings, locations and settings are kept while the App is installed. When a Merchant uninstalls the App, Shopify sends us a shop redaction request and we delete all data for that store within 30 days. A customer redaction request from Shopify erases that person's name from the bookings immediately (the day itself stays, because it is the Merchant's own schedule), and a data request returns those bookings to the Merchant.

Security

Data is transmitted over TLS and stored on access-controlled infrastructure. Access tokens are stored encrypted at rest by the hosting provider and are never exposed to browsers.

Your rights

Depending on where you live (including the EU/EEA, UK and California) you may have the right to access, correct, delete, port or restrict processing of your personal information, and to object to processing or lodge a complaint with a supervisory authority. Customers should contact the store they ordered from; Merchants may contact us at support@arteptech.com. We respond within 30 days.

Children

The App is intended for businesses and is not directed at children under 16; we do not knowingly collect their data.

Changes

We may update this policy; the date above shows the latest version. Material changes will be announced inside the App.

Contact

Artep tech (Aleksandar Stančević PR Računarsko programiranje Artep tech), Subotica, Serbia — registration no. 68211425, tax ID 115243761 · support@arteptech.com