Privacy policy
Last updated 18 October 2026. This covers the Proviso app for Shopify and this website.
Proviso is run by Tewodros Assefa (the “operator”). Merchants install the app on their Shopify store; the app then stores the data below to do its job and nothing else. It does not sell data, use it for advertising, or share it with anyone beyond the service providers listed here.
What the app stores
| Data | Why | Kept until |
|---|---|---|
| Your store’s domain, settings and rules (minimums, approval thresholds, deposit percentages), with the company and location names they apply to | To enforce the rules you set | Uninstall |
| Approval requests: the buyer’s customer id, name and email, the requested and approved amounts, notes, the approver’s email, and the decision | To email the approver and let the buyer check out once approved | Uninstall |
| Blocked checkouts: customer id and email, company and location, cart subtotal and item count, and the rule that applied | To show you which carts were stopped and why | Uninstall |
| Tax-exempt certificates: the uploaded file, jurisdiction, certificate number, tax registration id, issue and expiry dates | To set and clear Shopify’s tax-exempt flag and to remind you before expiry | Uninstall |
| Deposits: the buyer’s customer id and email, company and location, order amounts, and the draft order and order ids involved | To send deposit and balance invoices and track payment | Uninstall |
| An audit log of the changes above | So you can see who changed what | Uninstall |
The app reads company, location, customer, order and checkout data from Shopify only as needed for the features above, under the access you grant at install. It writes to your store in three ways: a metafield holding your rules, the tax-exempt setting on company locations, and draft orders for deposits.
Buyers’ data
Your B2B buyers never create an account with us. Their name and email reach the app through Shopify when they request an approval or check out, and are used only to send them the approval decision or deposit invoice and to show you the request. Approval emails and deposit invoices are sent on your behalf and identify your store.
Service providers
- Vercel (United States): hosts the app and stores certificate files.
- Neon (United States): the database for everything in the table above.
- Resend: delivers approval and reminder emails.
- Shopify: the platform the app runs on; Shopify’s own privacy policy governs your store data.
Data is transferred to and stored in the United States. Each provider is bound by its own data processing terms.
Deletion and requests
When you uninstall, Shopify notifies the app and all data for your store is deleted within 48 hours; Shopify’s shop redaction request is honoured the same way. Requests from Shopify to export or delete an individual customer’s data are handled automatically: the app returns or removes that customer’s approval requests, blocked checkouts and deposit records.
You can ask for a copy or deletion of your store’s data at any time by emailing support@tewodros.me from the store owner’s address.
This website
This site sets no cookies and runs no analytics. The hosting provider keeps standard server logs (IP address, pages requested) for a short period for security.
Changes
If this policy changes in a way that matters, the date above moves and installed merchants are told in the app.