NextBatch Privacy Policy

NextBatch: Preorder Widget ("the app") is a Shopify app operated by Lusson LLC, 30 N Gould St, Sheridan, WY 82801, USA ("we", "us"). It lets merchants show a schedule of upcoming production batches on their product pages.

This policy explains what data the app processes, why, and what happens to it. Questions: info@nextbatchapp.com.

The short version

• We store no shopper data. None. The widget on a merchant's product page runs entirely in the shopper's browser: it makes no requests to our servers, sets no cookies, stores nothing in the browser, and contains no analytics or tracking of any kind.
• What we do store: the merchant's shop domain, the boards the merchant builds (schedules, labels, colors, assigned products), and the Shopify account details of staff who sign in to the app.
• Billing runs through Shopify's own billing system. We never see or store payment details.
• Data is deleted when a merchant uninstalls the app.
• We never sell personal data, never share it across shops, never use it for advertising, and never use it to train AI.

Data we store (about merchants)

When a merchant installs and uses the app, we store:

Data	Where it comes from	Why
Shop domain	Shopify app installation	Tying boards and sessions to the right store
Staff sign-in details — name, email, locale, Shopify user ID — plus the OAuth tokens Shopify issues	Shopify's app authentication	Signing staff in to the embedded admin app
Boards — names, batch schedules, capacities, label text, colors, and the IDs and titles of assigned products	The board editor	The product feature: what gets published to the storefront

Subscription status (whether the shop has an active paid plan) is read live from Shopify to unlock publishing; we don't operate our own billing and never handle payment details.

Data the app writes to your store

Publishing a board writes its configuration to your own store as Shopify metafields and metaobjects — that's how the theme block renders it. This data lives in your store, under your control, and is removed when you delete the board. Deleting a board (and thereby taking the widget down) works on every plan, including after a downgrade.

The app's Shopify permissions are the minimum for that job: writing product metafields and metaobjects (publishing boards) and reading inventory (showing variant stock in the board editor and computing real-fill bars in the shopper's browser).

Shoppers

The storefront widget is two static files served with the merchant's theme. The board is computed in the shopper's browser from the product's metafield and the theme's own inventory data. It never contacts our servers, sets no cookies, uses no browser storage, does no fingerprinting, and carries no analytics. We cannot see the shoppers of any store running NextBatch.

Because of this, Shopify's customer data request and customer redaction webhooks are acknowledged automatically — there is nothing to report and nothing to delete for an individual shopper.

Where the data lives

We use vetted infrastructure providers to run the app: Vercel (application hosting) and Supabase (database). All connections use TLS; data is encrypted at rest by these providers.

Retention and deletion

• Uninstalling the app deletes your sign-in sessions immediately. Shopify then sends a shop data erasure request (48 hours after uninstall), on which we delete every remaining record for your shop — boards included.
• You can delete any board yourself at any time in the app, on any plan.
• You can also email info@nextbatchapp.com for deletion requests; we honor them within 30 days.

Security

Data is encrypted in transit (TLS) and at rest. Access tokens are stored server-side only and never reach the browser. Access to production systems is limited to the people who operate the app, behind strong authentication with two-factor auth. If personal data were ever involved in a security incident, affected merchants would be notified without undue delay.

The website

nextbatchapp.com (this site) uses Vercel Analytics — anonymous, cookieless page-view counts. No advertising trackers, no cross-site tracking.

Your rights

Merchants can exercise access, correction, deletion, portability, and objection rights (GDPR, UK GDPR, CCPA, and similar) by emailing info@nextbatchapp.com. Uninstalling the app triggers deletion automatically through Shopify, as described above. Shoppers have no data here to exercise rights over — their relationship is with the merchant's store, which the app cannot see into.

Changes to this policy

If this policy changes, the update appears on this page with a new date at the top. Material changes are additionally announced inside the app.

Contact

Lusson LLC · 30 N Gould St, Sheridan, WY 82801, USA · info@nextbatchapp.com