Privacy policy
Hexloom Tariff Check Canada is a Shopify app made by Hexloom Labs. It reads a store's products and checks their HS codes against published US tariff lists. This page says what it keeps.
What the app reads
With the merchant's permission (read products) the app reads, each time the merchant runs a check: product titles, variant titles and SKUs, the HS code (and up to ten HS codes set for a specific country or region) and the country of origin on each variant. This is matched in memory against the tariff tables and shown to the merchant. It is not written to the app's database.
What the app stores
- The shop: its myshopify.com address and the access token Shopify gives the app (stored encrypted).
- An audit log of who did what and when (for example "check run", "CSV exported", "plan chosen"), with no product or customer detail, kept 365 days.
- Short-lived counters that limit how often a check can run, and webhook ids (7 days) so a repeated delivery is ignored.
- Error logs: when something fails, the app writes one line to Cloudflare's logs with the event name, the store's myshopify.com address (when the failure belongs to a store), the type of error and the first 200 characters of its message, with email addresses, Shopify access tokens and long numbers removed. Cloudflare also keeps its standard record of each request to the app (such as the address requested, the response code and the time). Both are kept for up to seven days, hold no product or customer detail, and are read only to fix errors.
The app does not read or store orders, customers, buyers' names, emails, phone numbers or addresses, and it keeps no copy of your catalogue.
Who sees it
The merchant sees it through the app inside Shopify admin. Hexloom Labs, which runs the app, can read the shop record, the audit log and the error logs, and does so only to run the service and fix errors. Data is hosted with Cloudflare (Workers and Durable Objects). We do not sell it, share it or use it for advertising. We do not send email to merchants or to buyers.
Deletion
When the app is uninstalled the access token is deleted at once. Shopify then sends a store erasure request (about 48 hours later) and all remaining data for that store is deleted. Customer data requests and erasure requests from Shopify are logged; the app holds no customer data to return or erase. After erasing a store, the app keeps one audit line (shop domain, action, time) to show the request was handled. Error log lines age out on their own within seven days.
Your rights
Under laws such as the GDPR, the CCPA and Canadian privacy law you can ask what we hold about your store. Use the support page.