Privacy Policy

Last updated: March 19, 2026

1. Introduction

ST Systems ("we", "our", or "us") provides software and related services, including the Compliance Engine application for Shopify merchants. This Privacy Policy explains how we collect, use, store, and protect information when you use our website, our Shopify app, and related services.

2. Scope

This Privacy Policy applies to:

  • our website;
  • the Compliance Engine Shopify app;
  • communications with us relating to our products and services; and
  • information processed in connection with support, onboarding, maintenance, and app functionality.

This Privacy Policy does not apply to Shopify or other third-party services that are governed by their own privacy policies.

3. Information We Collect

A. Information merchants provide directly

We may collect information that merchants provide directly to us, such as:

  • name;
  • company or store name;
  • business email address;
  • contact details;
  • support or inquiry information; and
  • other information voluntarily submitted through forms, email, or support requests.

B. Information collected from Shopify

When a merchant installs or uses Compliance Engine, we may access and process Shopify store data reasonably necessary to provide the app's functionality, such as:

  • store information;
  • shop settings;
  • product information;
  • order-related information;
  • app configuration data; and
  • compliance-related settings, rules, results, or outputs generated through the app.

C. Customer personal information

Compliance Engine is not designed to use customer personal information such as customer name, email address, street address, or phone number as part of its core functionality.

We do not intentionally request, collect, or use customer name, email address, street address, or phone number through the app, except where such information may be incidentally included in Shopify resources beyond our control, or where access is strictly required by law, security needs, technical troubleshooting, or a valid legal request.

D. Website usage and technical information

We may automatically collect certain technical and usage information, such as:

  • IP address;
  • browser type;
  • device information;
  • pages visited;
  • referring URLs;
  • timestamps;
  • log data; and
  • analytics and performance data.

4. How We Use Information

We use information we collect to:

  • provide, operate, and maintain Compliance Engine and related services;
  • authenticate merchants and manage app access;
  • configure and deliver app functionality;
  • support merchants and respond to inquiries;
  • troubleshoot issues and improve performance, reliability, and security;
  • communicate important service, support, product, or policy updates; and
  • comply with applicable laws, regulations, and lawful requests.

We do not sell personal information.

5. Data Sharing and Disclosure

We may share information with:

  • service providers and subprocessors that help us host, maintain, secure, analyze, or support our services;
  • professional advisers where reasonably necessary; and
  • regulators, law enforcement, courts, or other authorities where required by law or where necessary to protect our rights, safety, security, or services.

We do not share personal information with third parties for their own advertising purposes.

6. Data Retention

We retain information only for as long as reasonably necessary to provide our services, maintain records, resolve disputes, enforce agreements, and comply with applicable legal, tax, accounting, or regulatory obligations.

When information is no longer reasonably necessary, we delete it, anonymize it, or securely dispose of it unless retention is required by law.

7. Data Security

We implement reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

We may process or store information in countries other than the country where a merchant is located. Where required by applicable law, we take reasonable steps to ensure appropriate safeguards are in place.

9. Your Rights and Choices

Depending on applicable law, merchants or individuals may have rights to request access to, correction of, deletion of, or restriction of certain personal information. We will consider and respond to such requests as required by applicable law.

10. Third-Party Services

Our services may integrate with Shopify and other third-party platforms or tools. Their handling of data is governed by their own terms and privacy policies, and we encourage you to review them separately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date on this page and, where appropriate, provide additional notice.

12. Contact

If you have questions about this Privacy Policy or our privacy practices, please contact us through our Contact page or at:

contact@st-systems.net

A physical mailing address is available on request—please reach out using the contact details above.