Privacy policy
Last updated 22 October 2026 · SahiSeal is operated by BillionEdges
SahiSeal ("SahiSeal", "we", "us") is a Shopify app operated by BillionEdges, Abu Dhabi, United Arab Emirates. It helps Indian online stores record a dark-pattern self-audit, publish a grievance officer and take complaints, show country of origin and importer details, and keep a price history. This policy explains what data the app handles when a merchant installs it and when a shopper uses a store's grievance page.
Who we process data for
SahiSeal processes data on behalf of the merchant whose store it is installed on. The merchant is the data controller for their shoppers' information; SahiSeal is a processor acting on the merchant's instructions. For the merchant's own account information, SahiSeal is the controller. Our data processing terms are part of the Terms of Service.
What we collect
From the merchant's store (via the Shopify API): store domain and name, storefront domain, currency, whether it is a development store, the store's contact email (read when a renewal reminder is due, not stored), product titles and each variant's price and compare-at price, and app subscription status.
From the merchant: the self-audit answers, optional evidence notes and links, the signer's name and designation; the grievance officer's name, designation, email, phone (optional) and postal address; country of origin and importer name and address for products; notes and status changes on complaints.
From shoppers who submit a complaint on a store's grievance page: name, email address, phone and order reference (if entered), the complaint text, the time it was received, and a salted hash of their IP address (used only to limit complaints from one address to five per hour; the address itself is never stored).
We do not collect payment card details, passwords, or precise location.
Why we use it
- To record the merchant's self-audit and issue the self-audit certificate, its PDF and its public verification page. The verification page shows the store name and domain, serial, dates and the signer's designation, not the signer's name.
- To show the badge, grievance link and origin details on the storefront through Shopify metafields and the app's theme blocks.
- To receive complaints, email the shopper an acknowledgement containing a copy of their complaint, notify the grievance officer, and show complaints in the merchant's inbox; and, if the merchant chooses, email the shopper when the complaint is resolved.
- To record price changes for each product variant, for the 30-day prior-price label in a later version.
- To email the merchant once, 30 days before the certificate expires.
- To bill the merchant through Shopify's billing system and apply plan limits.
- To keep the service secure and available (rate limits, error logs, uptime checks).
We do not sell data, use it for advertising, or train models on it.
Where it is stored
Data is stored in a PostgreSQL database hosted by Neon in the European Union (Frankfurt). The application runs on Fly.io in Amsterdam. Certificate PDFs are generated on request and not stored. Emails are sent through Resend from its Ireland (eu-west-1) region with open and click tracking off. Data is encrypted in transit (TLS) and at rest by these providers.
How long we keep it
- Self-audits, certificates, grievance officer details, complaints and origin details: for as long as the merchant keeps the app installed.
- Price history: 400 days from each observation.
- When the merchant uninstalls the app: the store's access token is deleted immediately. All data for that store is deleted 48 hours later, or as soon as Shopify's shop/redact request arrives if that is earlier.
- Application logs: kept 7 days by our hosting provider. Logs do not contain query strings, tokens or complaint contents.
Shoppers' rights and Shopify's privacy webhooks
Shoppers should contact the store they complained to. SahiSeal implements Shopify's mandatory customers/data_request, customers/redact and shop/redact webhooks. A redaction request deletes every complaint the shopper submitted to that store (matched by email address). On a data request we record which complaints we hold for that shopper; the merchant sees them in full in the app's complaint inbox.
Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Shopify | Platform, API, billing | Canada / global |
| Neon | Database | EU (Frankfurt) |
| Fly.io | Application hosting | EU (Amsterdam) |
| Resend | Transactional email | EU (Ireland) |
| Cloudflare | DNS, website hosting | Global edge |
Cookies
The storefront blocks and the grievance page set no cookies of their own. The merchant-facing admin runs inside Shopify's admin and authenticates with Shopify's session tokens. This website (sahiseal.com) uses no cookies and no analytics.
Changes
We will post changes on this page and update the date above. Material changes will also be announced inside the app.
Contact
[email protected] · BillionEdges, Abu Dhabi, United Arab Emirates