Privacy Policy

Who is responsible

Arturas Gotceitas / Lithuanian Masters operates Tikkivo BakeList. For merchant account and service administration data, we act as controller. For Shopify order data processed on a merchant’s instructions, the merchant is controller and we act as processor.

Information we process

• Shop identity, configuration, subscription status, and the Shopify user identity needed for access control and the agreement audit.
• Operational order data: Shopify order and line identifiers, order reference, product and variant, quantities, production dates, fulfillment and financial status, location or delivery method, tags, and merchant-selected production attributes.
• Technical session, webhook, export baseline, privacy-request status and export, and service health information needed to run, secure, and demonstrate compliance for the app.

The app does not request Shopify’s dedicated customer email, phone, billing-address, or shipping-address fields. A merchant-configured production attribute, such as a cake message, can still contain personal data. Merchants must configure only fields needed for production and must avoid placing contact, payment, health, or other unnecessary personal data in them. Order data is not used for advertising, profiling, or sale.

Why and how long

We process this information only to authenticate users, synchronize eligible orders, resolve production dates, prepare and export bake sheets, handle privacy requests, enforce subscriptions, secure the service, and meet Shopify lifecycle requirements.

Orders use a 90-day default retention period. An older order remains while it has a current or future production date, then becomes eligible for the normal retention cycle. Webhook receipts are retained for 30 days and are deleted only after successful dispatch to the queue; undispatched receipts remain until queued. Privacy-request status and exports and the agreement audit persist through the limited post-uninstall Shopify redaction lifecycle to demonstrate request handling and agreement history, and are erased on shop redaction.

Session records carry the Shopify session expiry and are removed through Shopify SDK session deletion; all sessions are deleted on uninstall and shop redaction. Shop redaction deletes the shop record and its privacy-request and agreement records, and explicitly deletes webhook receipts and export baselines. A minimal shop-redaction marker remains to prevent stale jobs restoring deleted tenant data and is cleared only by a completed new OAuth installation.

Service providers

We use Shopify to provide the commerce platform, OVHcloud-hosted infrastructure operated under our control to run the service, and Cloudflare for network delivery and protection. They process information only as needed to provide their services and under their applicable contractual terms. We will update this policy before adding another provider that processes merchant order data.

Security and international processing

We use Shopify authentication, tenant-scoped authorization, limited data collection, encrypted public transport, protected sessions, signed short-lived exports, access controls, and retention rules. No internet service is risk-free. Shopify and Cloudflare may process data internationally under their published arrangements and applicable transfer safeguards.

Your choices and data-subject requests

Merchants can change production settings and uninstall the app. A customer should submit access, correction, deletion, or objection requests to the Shopify merchant that controls the order. Merchants can contact [email protected]; we will assist with the data held by Tikkivo BakeList and respond to valid controller instructions.

Changes

The current version is 2026-10-16. Material changes require a merchant owner or administrator to accept the new version before returning to the workspace.

Contact