Store Vacation is operated by add-ons.org.
The app stores the merchant's vacation settings: closures and opening hours, the notice texts and colours, the products and collections that stay on sale, and a private access key. It reads the shop's name and timezone, and the titles of the chosen products and collections. It writes the published settings to an app metafield so the storefront can show the notice, registers a checkout validation function that refuses orders while the store is closed, and reads the published theme's settings to tell whether the app embed is switched on.
When the merchant switches on "Notify me when you're back", visitors can type an email address into the storefront notice. The address is stored for that shop only, is shown to the merchant in the app, can be exported by the merchant as a CSV file and deleted by the merchant at any time. The app never sends email to these addresses and never shares them. A customer's request to erase their data received from Shopify (customers/redact) deletes their address.
The app does not receive, read or store orders, customer accounts, addresses, phone numbers or payment details. The checkout validation runs inside Shopify and sends nothing to the app.
Paid plans are billed by Shopify through the merchant's Shopify invoice. The app never sees payment details.
Data is exchanged with Shopify only. No other service receives store data.
Settings and email addresses remain until the merchant deletes them, or until the app is uninstalled and Shopify requests shop data erasure (48 hours after uninstall), at which point everything for that shop is deleted. Authentication sessions are deleted on uninstall.
For privacy questions, use the contact form.