SpecQueue Privacy Policy

Last updated: August 30, 2026

Introduction

SpecQueue is an order-validation app for Shopify merchants. This Privacy Policy explains what information SpecQueue processes, how that information is used, and how privacy requests are handled.

Data we process

SpecQueue processes the limited information it needs to validate orders against merchant-configured product rules:

  • the Shopify shop domain, and the installation and session identifiers Shopify issues for the app
  • Shopify product identifiers, and the product validation rules a merchant configures in the app
  • Shopify order identifiers, together with order lifecycle information used to decide whether an order still needs checking: cancellation and closure timestamps, fulfillment status, and last-updated time
  • line-item identifiers, the product identifier attached to each line item, and the line-item custom properties used for validation
  • the order number and order total, read only to label recent orders in the order picker
  • SpecQueue correction state and waiver state for an order
  • subscription and billing state required to determine app access
  • webhook and request metadata needed for reliability, lifecycle processing, duplicate suppression, and security

SpecQueue processes order data, because validating an order requires reading it. What SpecQueue stores is narrower than what it reads: its database records order and line-item identifiers, the names of the properties a rule applies to, and the outcome of each check. It does not store the property values themselves. Property values are read from Shopify at validation time and, where a merchant saves a correction, written back to the Shopify order.

SpecQueue requests the Shopify access scopes read_products, read_orders, and write_orders. It does not request or access protected customer fields. No SpecQueue query selects customer name, customer email address, customer phone number, or customer postal address.

How we use data

SpecQueue uses this information to provide and operate the app: applying product-specific validation rules, displaying PASS or BLOCKED order results, identifying missing or invalid order properties, supporting merchant-requested corrections and waivers, maintaining installation and subscription state, processing Shopify webhooks, preventing duplicate processing, and maintaining service reliability and security.

Data storage and service providers

Shopify remains the authoritative source of commerce information used by SpecQueue. Correction and waiver state is stored on the Shopify order itself, as an app-owned order metafield and an order tag, rather than in the SpecQueue database.

Application data is processed by the infrastructure provider used to host the application and its database. The current deployment is hosted on Railway.

SpecQueue does not sell merchant or customer data, and does not use merchant or customer data for advertising.

Retention and deletion

SpecQueue retains application data only for as long as needed to provide the service and to meet operational or legal requirements.

SpecQueue supports the mandatory Shopify privacy lifecycle webhooks customers/data_request, customers/redact, and shop/redact. Their behaviour in the current implementation is:

  • customers/data_request — SpecQueue records that the request was received and acknowledges it. SpecQueue stores no customer personal data, so there is no customer data to return.
  • customers/redact — SpecQueue records that the request was received and acknowledges it. SpecQueue stores no customer personal data, so there is no customer data to erase.
  • shop/redact — SpecQueue deletes the stored shop record and its Shopify session records. Deleting the shop record cascades to every table scoped to that shop, including its rules, scan results, scan issues, pipeline state, and webhook records.

When an app is uninstalled, SpecQueue also acts on the app/uninstalled webhook: it deletes the Shopify session records, discards queued work, deletes the scan results, scan fences, pipeline state, and rules for that installation, marks the installation as uninstalled, and clears the stored billing state. The remaining shop record is deleted when shop/redact arrives.

Correction and waiver state written to a Shopify order metafield or order tag is stored on the Shopify order and is governed by the Shopify data lifecycle for app-owned order data, not by SpecQueue database deletion.

Customer data requests

Privacy requests relating to Shopify customer data are processed through the mandatory Shopify privacy webhook workflow described above. SpecQueue verifies and records each request it receives and responds to Shopify. Because SpecQueue stores no customer personal data, there is no customer record for SpecQueue to return or erase.

Security

SpecQueue relies on the Shopify-managed authentication and session mechanisms provided by the Shopify app framework for merchant access to the embedded app.

Every Shopify webhook SpecQueue receives is verified by recomputing its HMAC-SHA256 signature over the raw request body and comparing it to the signature Shopify sent, using a constant-time comparison. A request whose signature does not verify is rejected with an authentication error and is not processed.

Operational access to application data is restricted to those who need it to run the service.

SpecQueue makes no claim to any external security certification or audit.

International processing

Application infrastructure may process information in locations where its hosting providers operate, including the United States.

Your choices and privacy rights

A merchant can uninstall SpecQueue at any time from the Shopify admin. Uninstalling triggers the deletion behaviour described under Retention and deletion.

Privacy requests involving Shopify customer data should be raised through the Shopify privacy workflow, which delivers them to SpecQueue as the webhooks described above.

Contact

For privacy questions about SpecQueue, write to 348442987@qq.com.