Privacy Policy

App: Tendria Hide Payment Methods (Shopify app) · Provider: GRAMSHIFT (Tokyo, Japan) · Last updated: 2026-10-19

Summary

Tendria Hide Payment Methods does not collect, store or share any personal data of your customers. It does not read orders or customer records. Your rules are saved in your own Shopify store. Our server keeps only what it needs to connect to your store: your store's address and the access token Shopify gives the app, plus short-lived logs. Shoppers' browsers never contact our server.

What the app reads from your store

• Products, with read-only access: titles, tags, vendors, product types and the collections they are in, so you can pick them in rules and on the Test page. The app does not change your products.
• Your store's name, address on myshopify.com, currency, billing country and whether it is on Shopify Plus, so amounts use your currency and the app knows which payment changes Shopify allows on your store.
• The app's own payment customization (the one the app creates under Settings > Payments), to keep it in step with your rules.
• Your app plan, from Shopify, to know whether Pro features are on.
• A signed session token that Shopify sends with every request from the admin, to check that the request really comes from your store. The app does not read the staff member's name or email.

What the app saves, and where

The app's only permissions are to read products and to manage its payment customization. It requests no permission for orders, customers or other customer data, and uses the access token only for the features described here. Your plan is checked with Shopify when you open the app and kept in memory for a few minutes, not stored.

At checkout

• Your rules run inside Shopify's checkout, on Shopify's systems. For each cart, Shopify gives the rules only what they need: the cart's amounts and items, the tags, collections, vendors and product types of its products that your rules name, the shipping country, checkout language and currency, whether the shopper is logged in and, for a logged-in shopper, whether they have the customer tags your rules name. The rules answer which payment methods to hide, rename or move.
• Nothing from checkout is sent to GRAMSHIFT or kept by the app. The app sets no cookies on your storefront and uses no analytics, advertising or tracking. Shoppers' browsers send nothing to GRAMSHIFT.

In the Shopify admin

The app remembers in your own browser's local storage when it last asked you for a review, so it does not ask again too soon. Nothing about this is sent to our server.

Sharing

We do not sell or rent any data and do not share it with third parties, except the service providers named on this page (our server host, our email forwarding provider and Google for email), and when the law requires it.

Information GRAMSHIFT receives from Shopify

As an app provider, we see in the Shopify Partner Dashboard which stores installed the app, their plan and billing events, and the store contact details Shopify shares with app providers. We use this only to manage plans, answer support requests and meet legal obligations. Payments are processed by Shopify; we never receive card details.

Support requests

If you email us, we receive what you choose to send (for example your email address, your message and screenshots) and use it only to answer you. Email to contact@gramshift.com is forwarded by our email forwarding provider (ImprovMX) to a mailbox hosted by Google (Gmail), so those providers process support emails on our behalf.

Retention and deletion

• Removing the app: when Shopify tells us the app was removed, we delete your store's access token and session data from our server. Forty-eight hours after removal, Shopify sends a request to erase the store's data, and we delete anything that is left for your store.
• Your rules are app data on the app's installation and on the app's payment customization, so Shopify removes them together with the installation when the app is removed, and checkout shows your payment methods as it did before the app.
• Customer data requests: the app holds no customer data, so requests that Shopify forwards for a customer's data or its erasure find nothing to return or delete.
• Support emails are kept only as long as needed to handle the request and meet legal obligations; you can ask us to delete them. Installation and billing records are kept for up to 7 years for accounting and tax purposes.

Security

All connections use HTTPS. The app's server checks the signature of every request and webhook from Shopify, runs under its own restricted system user, and keeps its database and secrets readable only by that user.

Legal basis and location

We process store information to provide the app you installed (contract) and for our legitimate interest in keeping the service secure and answering requests, and to meet legal obligations. GRAMSHIFT is based in Japan, and our server is in Japan.

Your rights

You can ask us to access, correct or delete personal information we hold about you, or object to its use, by emailing contact@gramshift.com. If you are in the EEA or the UK, you can also complain to your local data protection authority.

Changes

If the app starts to collect more data or send data anywhere else, this policy will be updated before that change is released, and the date above will change.

Contact

GRAMSHIFT · contact@gramshift.com · 1-10-8 Dogenzaka, Shibuya Dogenzaka Tokyu Bldg 2F-C, Shibuya-ku, Tokyo 150-0043, Japan

プライバシーポリシー（日本語）