Tagwright privacy policy

Last updated: 19 October 2026

This policy is not finished: some details below are still missing.

Tagwright is a Shopify app for printing barcode and price labels. This policy explains what information the app uses, why, and how long it is kept. “We” means [not set: PRIVACY_BUSINESS_NAME], who provides Tagwright. Our terms of service apply to your use of Tagwright.

Who is responsible

[not set: PRIVACY_BUSINESS_NAME], trading as Tagwright, a natural person carrying on individual activity in Lithuania, [not set: PRIVACY_BUSINESS_ADDRESS], registered in the Register of Taxpayers of the State Tax Inspectorate (Valstybinė mokesčių inspekcija) under individual activity certificate No. [not set: PRIVACY_BUSINESS_REGISTRATION]. Contact: support@countinghouseapps.com, or our contact form.

For personal data about your customers that Tagwright processes for you, such as the orders you add to your print list, you are the controller and we act as your processor under our data processing agreement.

Information the app uses

When a store installs Tagwright, Shopify lets the app read the store’s products, inventory, locations, inventory transfers and their shipments, and orders, and change its products. The app uses product and variant details (such as titles, vendors, SKUs, barcodes, prices, images and the product’s address in your online store), stock levels, location names, transfer names, dates and statuses, which items a transfer moves and how many arrived, for your recent open orders, which the app lists for you to add from: their name, date, fulfilment status and number of items, and which variants they hold and how many are left to fulfil — nothing about the customer — and the store’s money format and time zone to show your print list, make labels, show dates as your store counts them and count your Free plan’s month. This information is read from Shopify while you use the app; we do not keep a copy of it, except for what is listed below.

Tagwright changes your products only when you ask it to create barcodes: it then saves a new barcode to each chosen variant that has none. It never changes a barcode a variant already has, or anything else about your products.

Your plan and payments are handled by Shopify; of them, the app only reads which plan your store is on. Shopify also shows us, in our Shopify Partner account, which stores use Tagwright, when they installed or uninstalled it or their store closed or reopened, their plan and charges for it, and reviews of Tagwright; we use this only for billing, support, answering reviews, and deleting the data of stores that have uninstalled Tagwright.

We use your store’s email address in Shopify (the one Shopify uses to contact you) only to send you the notices our terms, our data processing agreement and this policy promise, such as a change to them or to our sub-processors, a price rise or a removed feature, a personal data breach that affects your data, a suspension of your use, the end of our agreement, or the end of Tagwright; and to answer Shopify’s requests about a customer’s data and what you write to us.

We store:

• your store’s Shopify address (for example, your-store.myshopify.com);
• the access token Shopify issues to the app, the token that renews it, and the permissions you granted: they let the app read your store’s data on your behalf, and save barcodes when you ask it to;
• your print list: the IDs of the product variants you add, the label quantities you type or take from a transfer or an order, the notes you type for labels, and the stock location you choose;
• the orders you add to your print list: their Shopify id and number (such as #1001) and when you added them, so an order is not counted twice — kept while their rows are on the list, and deleted when Shopify asks us to erase a customer’s data;
• your label templates: the names you give them, their label settings and a logo you add to them; and the custom label sizes you define: their names and measurements;
• the problems and ideas you send us: what you type, for a problem the details the form shows (the page, the label format and printer type, your browser’s name and main version, and your system’s name), and your plan at the time; and the published requests you vote for;
• our thanks for your reports: extra labels (how many, and when we gave them), and Pro features given to you until a date; which news about your reports the app has shown you; and which notes about Pro features you have closed;
• how many labels you download each month (counted on every plan, labels printed from Shopify POS included; the Free plan has a monthly limit, and on it labels printed from Shopify’s Print menu count too), and how many labels each Print-menu window has counted, so changing its options does not count them twice (deleted once an hour old, the next time Print-menu labels are counted);
• which plan your store is on, as Shopify last reported it (checked about hourly), and your store’s Shopify id;
• your store’s email address in Shopify, for the notices and answers described above (read again from Shopify at most once a day while you use Tagwright);
• how you use Tagwright: when your store first opened it; how many labels you download, or see in a Print-menu preview, and in which label format (a size of your own only as “custom”); when you open the Plan page; and when you create a template or a label size, add products from a transfer or an order, or create barcodes. All of it is deleted after 13 months, except when your store first opened Tagwright;
• requests you send us that must be answered by a date, such as a request to use your privacy rights: who asked (their email address), the store, the kind of request, when it came and when it is due, and a short note; deleted when answered, after which we keep only its kind and dates, without the store or who asked, for up to 3 years, to show that we answer in time;
• the next barcode number Tagwright will use for your store, so new barcodes never repeat.

The label files (PDF and ZPL) and the file of your data are made when they are downloaded and are not stored. When you ask us to send you that file, we download it, email it to you and delete our download at once; the email is kept as described under “Email”.

Of your orders, Tagwright keeps only what is listed above: the label counts taken from them, and their ids, numbers and the date you added them. It does not store or use your customers’ names, email addresses, phone numbers or postal addresses, payment details, or the names or email addresses of your staff (except the address of whoever sends us a request, while we answer it); of your store’s own contact details it uses only the email address described above. It does not use tracking cookies or third-party analytics. Our server keeps technical logs to keep the service running and secure, such as when requests came and their addresses (without their parameters), IP addresses, and error messages, which can name your store. Log entries are deleted automatically after 30 days at the latest.

If you type a customer’s details into a label note, a template name, a label size name or a report, we keep them there: please don’t, and ask us to delete them if you did.

Why we use it

We use personal data only for these purposes, each on the legal basis shown (GDPR Article 6(1)):

• Providing Tagwright to your store (your store’s address, access tokens, print list, the orders you add, templates and label sizes, label counts, plan and barcode numbers): performing our agreement with you (point b); for people who are not party to it, such as your staff, our legitimate interest in providing the app your store installed (point f).
• Seeing how you use Tagwright’s features, which shows us what works and what to improve; only we see it: our legitimate interest in improving Tagwright (point f).
• Keeping Tagwright secure and finding faults (server logs and error reports): our legitimate interest in a secure, working service (point f).
• The notices our terms, our data processing agreement and this policy promise, sent to your store’s email address in Shopify: performing our agreement with you (point b), and our legal duties as your processor, such as telling you about a personal data breach (point c; GDPR Articles 28 and 33(2)).
• Your reports and votes: fixing problems, telling you when something you reported changes, and giving the thanks the app describes (point b); deciding what to build next: our legitimate interest in improving Tagwright (point f).
• Billing, support, and deleting the data of stores that have uninstalled Tagwright, with what Shopify shows us in our Partner account and tells us by email: performing our agreement with you (point b); replying in public to a review of Tagwright: our legitimate interest in answering what is said about it (point f).
• Answering what you write to us, by email or with our contact form: performing our agreement if you are a merchant; otherwise, our legitimate interest in answering people who write to us (point f).
• Handling a request to use your privacy rights, and keeping it until it is answered: our legal obligation to answer it (point c; GDPR Articles 12 and 15 to 22).
• Keeping an email longer than this policy says, only when the law requires it (for example while we investigate a breach) or while a legal claim it concerns is made or expected: our legal obligation (point c), or our legitimate interest in establishing or defending legal claims (point f).

You can ask us for the assessment we made of our legitimate interests.

Who we share it with

We do not sell or rent your information. Tagwright, its database and its backups are hosted by Hetzner Online GmbH in Germany, in the European Union. Hetzner Online GmbH carries our emails with you. Shopify provides the platform the app runs on; Shopify’s own privacy policy applies to Shopify.

Hetzner Online GmbH may process our email outside the European Economic Area, in [not set: PRIVACY_EMAIL_COUNTRIES]. The transfer relies on the European Commission’s Standard Contractual Clauses in Hetzner Online GmbH’s data processing agreement.

The Standard Contractual Clauses are published at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj, and the decision on the EU–U.S. Data Privacy Framework at https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj. You can ask us for a copy of the safeguards we rely on.

Email

Our email goes through one mailbox, support@countinghouseapps.com, at Hetzner Online GmbH; we do not forward it to other mailboxes or keep copies of it elsewhere. It holds the emails anyone sends us (merchants, their staff and others) and the messages sent with our contact form, with the sender’s name, email address and what they write or attach, and our replies; the notices we send to stores’ email addresses in Shopify; Shopify’s own emails to us about Tagwright (for example about installs, reviews and payouts), which can name a store; and our answers to Shopify’s requests about a customer’s data, which name the customer’s order numbers.

Every email, sent or received, is deleted from our mailbox at the latest 21 days after it was sent or received, unless the law requires us to keep it (for example while we investigate a breach) or we need it for a legal claim that is made or expected; our email provider keeps deleted email in its backups for the time its own terms set. Please don’t send us your customers’ details by email; if you do, we delete them at once when you ask.

If you are a customer of a store that uses Tagwright and write to us about your data, we ask you to contact that store, which decides how your data is used, and delete your email.

How long we keep it

We keep the information listed above while Tagwright is installed. When you uninstall Tagwright, we delete the access tokens straight away. Shopify then asks us to delete the store’s data 48 hours later, and we delete everything our database holds about the store when that request arrives, except a request about it that we have not answered yet, which we keep without the store until we have. Anything we delete is gone from our database backups within 30 days: of the uninstall, of the request to delete it, or otherwise of when we deleted it. Shopify can also ask us for or about a customer’s data: we then delete the numbers of that customer’s orders from your print list, or say which are on it, keeping the request and those numbers until we have answered it or the store’s data is deleted; Tagwright keeps no other customer data from Shopify. A customer’s details you typed in yourself are deleted when you ask. Emails are kept as described under “Email”.

Your rights

The EU General Data Protection Regulation (GDPR) protects information about people, not about companies. Because we are established in Lithuania, it applies to all personal data we use, wherever you are: for example if you run your store as a sole trader, or work for a store that uses Tagwright.

You have the right to ask us for access to your personal data and a copy of it, to have it corrected or deleted, to restrict how we use it, and to receive the data you gave us in a structured, commonly used and machine-readable format; your store’s data is also on Tagwright’s “Your data” page, to download at any time. To use these rights, email support@countinghouseapps.com. We answer within one month; if a request is complex, we can take up to two more months, and we tell you why within the first month (a request to delete is carried out within the 30 days under “How long we keep it”).

Your right to object

Where we use your personal data on the basis of our legitimate interests (see “Why we use it”), you can object at any time, on grounds relating to your situation. We then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or need the data to establish, exercise or defend legal claims. Email support@countinghouseapps.com.

Complaints

You can complain to a data protection supervisory authority, in particular in the EU or EEA country where you live or work, or where you think the law was broken. The authority that supervises us is the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), vdai.lrv.lt.

Whether you must give us data

No law requires you to give us personal data. Tagwright needs your store’s data from Shopify, and your store’s email address in Shopify, to work and to send the notices our terms promise: without them we cannot provide the app. Reports, votes and messages to us are your choice. We make no decisions about you based only on automated processing that have legal or similarly significant effects on you.

Security

Information the app sends or receives over the internet always uses encrypted connections (HTTPS), and so do our backups on their way to separate storage (SSH); the store’s Shopify access token, the ids and numbers of the orders Tagwright keeps and the email address of whoever sends us a request are stored encrypted, and so are our database backups; and access to our systems is limited to what is needed to run the app.

Changes to this policy

If we change this policy, we update this page and the date at the top. We tell you about a significant change (a new purpose, a new recipient, or a new country outside the European Economic Area) by email to your store’s email address in Shopify at least 30 days before it applies. We never use personal data for a new purpose before we have told you.

Contact

Questions about this policy: support@countinghouseapps.com, or our contact form.