Last updated: July 24, 2026 · Rtlize (Hebrew App)
This policy covers the Hebrew App by Rtlize (Shopify app) and the rtlize.com website. We comply with Israel's Privacy Protection Law, GDPR principles, and Shopify's privacy requirements.
Personal data of a store's shoppers (cancellation requests, back-in-stock/price-drop signups, accessibility reports) is stored inside the merchant's own Shopify store, not on our servers. The merchant is the data controller; we act solely as a processor to power the features the merchant enabled.
Store domain, feature settings, subscription plan, merchant support messages, and anonymous aggregate usage counters. We never store payment card details — all billing is handled by Shopify.
We access store data only through Shopify's official scopes and only as needed per feature — including orders limited to the last 60 days (cancellation validation and Israeli postal-code correction).
On uninstall, all shop data is deleted automatically when Shopify's redaction webhook arrives (~48h). Shopper deletion requests are honored automatically via Shopify's GDPR webhooks. Manual requests: info@rtlize.com.
We never sell or rent personal data, never use one store's data for another, and never advertise to a store's shoppers. Data is shared only with subprocessors essential to operating the service (Shopify, our hosting provider, Cloudinary for website images).
All traffic is TLS-encrypted and server access is restricted to authorized personnel with strong authentication. Data-loss prevention: automated daily backups with an encrypted off-site copy and periodically tested restores; test and production environments are fully separated, including separate databases. In the event of a security incident affecting personal data, we will act immediately to contain it and notify affected merchants by email without undue delay, including the nature of the incident and the steps taken. We operate as a data processor for the merchant under this policy and under Shopify's API and data protection terms, which apply to every app on the platform.
Our website analytics are self-hosted, cookieless, and shared with no third party. Merchants may request access, correction, or deletion at info@rtlize.com; shoppers should contact the store they purchased from. We may update this policy; the current version always lives at this page.