Privacy policy
Last updated: August 17, 2026
RD Rentals ("the app") is operated by Rakun Digital ("we", "us"). This policy explains how we handle information when people visit our public marketing pages or when merchants install and use the app on Shopify.
Who this policy covers
This policy applies to visitors to our public marketing pages and merchants who install RD Rentals. The app works inside Shopify admin to manage rental products, bookings, and calendar widgets. It does not replace Shopify checkout or collect buyer payment information directly.
Information we collect
- Shop and staff context from Shopify OAuth: store domain, access tokens (encrypted at rest), granted API scopes, and app installation metadata needed to run the service.
- Product and inventory data via Shopify Admin APIs: product details, inventory levels, and pricing configuration required to manage rental products and availability.
- Booking data: rental bookings, date ranges, status, and customer information needed to track and manage reservations.
- Pricing and deposit configuration: pricing tiers, deposit settings, and buffer day rules you configure in the app.
- Operational logs: structured application logs and optional error reporting to keep the service reliable.
- Support conversations: messages, files, and contact details you choose to provide, plus technical session information needed to operate and secure the Crisp chat.
How we use information
- Authenticate your shop and manage rental products, bookings, and availability.
- Display the booking calendar widget on your storefront product pages.
- Process bookings and pass rental data through Shopify checkout via Cart Transform.
- Enforce plan limits and billing through Shopify's Billing API.
- Respond to mandatory Shopify GDPR webhooks and uninstall cleanup.
- Improve reliability, security, and support for merchants.
What we do not do
- We do not sell merchant data.
- We do not process buyer checkout or payment card data directly.
- We do not process payments. All checkout goes through Shopify's native checkout experience.
Storage and security
Shopify access tokens are encrypted with AES-256-GCM before storage. Application data, booking records, and pricing configuration are stored in PostgreSQL via Supabase. We use industry-standard transport security (HTTPS/TLS) in production.
Support chat and cookies
Our public marketing pages load Crisp for customer support. Inside Shopify admin, Crisp loads only when you request support. Crisp uses functional chat-session cookies to preserve a conversation across pages and visits. When Crisp loads, it may process your IP address, conversation content, files, contact details you choose to provide, and the current embedded page URL, including Shopify shop and host context. RD Rentals does not deliberately prefill Shopify staff identity, plan details, billing data, booking data, or internal identifiers in Crisp.
Data retention
Booking history, rental product configuration, and pricing data are retained according to your plan and operational needs. When you uninstall the app, data is purged on a schedule that depends on your subscription tier (immediately on Free, 30 days on Pro, 90 days on Enterprise unless law requires otherwise).
GDPR and Shopify compliance webhooks
We subscribe to Shopify's mandatory privacy webhooks, including customer data request, customer redact, and shop redact. We use these signals to locate and delete or export data we hold in connection with a shop.
Subprocessors
We rely on infrastructure providers to operate the app, including:
- Shopify: platform, OAuth, Admin APIs, Cart Transform, and billing
- Supabase: PostgreSQL database hosting
- Fly.io: application hosting and deployment
- Optional observability and error reporting services when enabled
- Crisp: customer support chat and functional session cookies
Your choices
You can uninstall the app from Shopify admin at any time. You may contact us to ask questions about data we hold for your shop.
Contact
Questions about this policy or your data: hello@rakun.digital or support chat. Company site: rakun.digital.
Changes
We may update this policy as the app evolves. Material changes will be reflected on this page with an updated date.
