Privacy Policy

Big Studio Order Rules · Last updated August 13, 2026

Who we are

Big Studio Order Rules is developed and operated by Inversiones RV SpA (BigStudio), Chilean tax ID 78.153.109-K. For any question about this policy or about your data, write to hola@bigstudio.cl.

What the app does

The app enforces order rules at checkout: a maximum number of units per product, and a block on products carrying a specific tag. The rules run on Shopify's servers through the Cart and Checkout Validation Function API. The app reads cart line quantities and whether a product carries the configured tag. It does not read anything else.

Data we do not collect

The app does not collect, store, process or transmit any personal data about your customers. It has no access to customer names, email addresses, phone numbers, shipping addresses, payment details or order history. Its two access scopes are read_products and write_validations, neither of which grants access to customer or order data, and the validation function never requests customer fields.

Data we do collect

To keep the app installed and working, we store the following for each store, and nothing more:

• The store's myshopify.com domain.
• The access token and refresh token that let the app talk to the Shopify Admin API on that store's behalf.
• The Shopify user ID and, where Shopify provides it during installation, the name, email address, locale and account role of the staff member who installed the app.

Your rule settings (the unit limit, the messages and which rules are on) are not stored by us. They live in a metafield inside your own Shopify store.

How we use it

Only to operate the app: to authenticate requests to your store, to read and write the rule configuration, and to provide support when you ask for it. We do not sell this data, do not share it with third parties for their own purposes, do not use it for advertising, and do not use it to train machine learning models.

Where it is stored

On servers operated by BigStudio at a third-party hosting provider, with encrypted connections (HTTPS/TLS) and access restricted to the personnel who maintain the app.

Deletion and retention

When you uninstall the app, the stored session for your store is deleted immediately. Shopify also sends a shop/redact request 48 hours after uninstall, and we delete any remaining record for your store at that point. We keep nothing after that.

We honour Shopify's mandatory privacy requests (customers/data_request, customers/redact and shop/redact). Because we hold no customer data, the two customer requests have nothing to return or erase, and we confirm receipt as required.

Your rights

You can ask us at any time what we hold about your store, and ask us to delete it. Write to hola@bigstudio.cl and we will respond within 30 days. Uninstalling the app achieves the same result automatically.

Changes

If this policy changes, the date at the top changes with it. Material changes will be communicated to installed stores by email.