Privacy Policy

Last updated: 17 August 2026

Placket is a product configurator for Shopify stores, operated by Tibay (tibaylabs.com). This policy explains what data Placket handles, why, where it lives, and how it is deleted — for the merchants who install the app and for the shoppers who design products through it.

The short version: we store what is needed to run a configurator and fulfil the orders it produces, and nothing else. We never see payment card details, we do not sell or share data for advertising, and we honour every deletion request Shopify sends us.

What we collect, and why

From merchants (the store that installs Placket):

• Store details Shopify provides on install — shop domain, store name, contact email, currency — so the app knows which store it is serving.
• The name and email of staff who open the app inside the Shopify admin, provided by Shopify's own sign-in, so access control works. No separate Placket account or password exists.
• The products, options, artwork, prices and SKU codes merchants build in the editor — this is the product itself.
• Subscription state from Shopify's Billing API: which plan, its status, and its trial dates. Billing happens on the merchant's Shopify invoice; we never receive or store card or bank details.

From shoppers (customers of a store using Placket):

• The design they build: the options they chose, any text they typed, and any images they uploaded — kept so the merchant can produce exactly what was ordered.
• Order references for designs that were bought — the order and line item that a design belongs to — so a purchased design is matched to its order. Order data is read from Shopify when a merchant views it and is not copied wholesale into our systems.

We do not collect shopper names, addresses or payment details. Free-text and uploaded artwork are treated as potentially personal and are covered by every deletion right below.

How we use it

• To run the configurator: render products, enforce option rules, generate SKUs, and create real Shopify variants.
• To let merchants fulfil orders: showing which design belongs to which order, and producing print-ready files.
• To operate the service: transactional email (for example billing notices) sent via Resend from getplacket.com addresses, and aggregate, non-identifying usage counts.

We do not sell data, share it for advertising, or use shopper designs for anything beyond serving the store they were created on.

Where it lives

Placket runs on Laravel Cloud with its database and file storage hosted in the United Kingdom / European region (AWS, eu-west-2). Traffic is encrypted in transit (TLS) and API secrets are encrypted at rest. Access to production systems is limited to Placket's operators.

Deletion, and Shopify's mandatory requests

Placket subscribes to all three of Shopify's privacy webhooks and honours them within 30 days of receipt:

• customers/data_request — we provide the merchant with the data we hold that relates to the named customer (their designs and order references).
• customers/redact — we delete the named customer's designs, including uploaded artwork and typed text.
• shop/redact — sent by Shopify 48 hours after uninstall; we delete the store's data, including its products, designs and stored files.

Merchants can also request deletion at any time by emailing admin@getplacket.com.

Retention

Merchant and shopper data is kept while the app is installed, because it is the store's live catalogue and order history. Abandoned shopper designs that were never bought are pruned on a rolling basis. After uninstall, data is retained only until Shopify's shop/redact request arrives, then deleted as described above.

Your rights

Depending on where you live (including under UK/EU GDPR and the CCPA), you may have the right to access, correct, export or delete personal data. Shoppers should contact the store they bought from — the merchant is the data controller for their store's customers, and Placket acts on the merchant's and Shopify's instructions as a processor. Merchants can contact us directly at admin@getplacket.com.

Changes

If this policy changes materially, the date above moves and installed merchants are notified by email. Continued use of the app after a change takes effect constitutes acceptance.

---

Questions about any of this: admin@getplacket.com.