Privacy Policy

Last updated: September 18, 2026 · Applies to the Shopify app “njX Alerts for Slack & Discord” by njX

Who we are

njX Alerts for Slack & Discord is operated by njX, an independent developer. Contact: [email protected].

What the app does

It sends notifications about events in your Shopify store — paid orders, refunds, cancellations, abandoned checkouts and a daily summary — to the Slack channels and Discord channels you connect.

Data we process

To send a notification we receive order data from Shopify through webhooks and the Admin API: order number, amounts, currency, line items, payment method, customer name, email, city and country, and the order note. This customer data is processed in transit only: it is queued for a few seconds, formatted into a message and delivered to Slack or Discord. We do not store customer names, emails, addresses or notes in our database.

We store: your store domain, an API access token, your settings, the Slack workspaces and channels you connected (the workspace bot token is stored encrypted), Discord webhook URLs (stored encrypted), the id of the Slack message an order was posted as (so refunds can reply in its thread; deleted after 30 days), delivery logs (order number, status, timestamp — no customer fields), the ids of abandoned checkouts we have already alerted about, and messages you send us through the support form.

Where data is processed

• Cloudflare (Workers, D1, Queues) runs the app; data stays on Cloudflare’s network in transit.
• Slack (Slack Technologies, LLC, a Salesforce company) and Discord (Discord Inc.) deliver the messages. Delivered messages live in the channels you chose, under Slack’s and Discord’s own privacy policies.
• Shopify handles billing; we never see payment details.

Retention

• Delivery logs: deleted after 90 days.
• Processed-webhook ids: deleted after 7 days. Slack thread references: after 30 days.
• When you uninstall the app, or when Shopify sends a shop/redact request, all data for your store is deleted within 48 hours and the Slack bot tokens are revoked.
• Customer data requests from Shopify are acknowledged automatically: we hold no customer names, emails or addresses, so there is nothing to return. On a customer redaction request we also delete the delivery-log rows and Slack thread references of that customer’s orders (they contain order numbers only).

Security

All traffic is encrypted in transit (TLS). Stored data and its backups are encrypted at rest by Cloudflare (D1); Slack bot tokens and Discord webhook URLs are additionally encrypted with a separate key (AES-256-GCM). Test and production data are separated: development runs against a development store and a local database; production runs on its own worker and database. Only the operator has access to production; the Cloudflare, GitHub and Shopify Partner accounts require strong passwords and two-factor authentication, and every access is recorded in Cloudflare’s audit log.

Incident response

• Detection. Errors, failed deliveries and health checks are monitored around the clock by an internal alerting bot; the operator is paged within minutes.
• Containment. On a suspected breach we revoke the affected access tokens, rotate secrets and, if needed, pause deliveries until the cause is fixed.
• Notification. Affected merchants are notified by email within 72 hours of confirming an incident, with what happened, which data was involved and what we did; Shopify is informed through the Partner channels.
• Review. Every incident ends with a written post-mortem and a change that prevents the same failure.

Data loss prevention: customer data is never stored, so there is nothing of your customers’ to lose; store settings and delivery logs are covered by Cloudflare’s point-in-time backups.

Your responsibilities

You decide which channels receive alerts. Anyone in a connected channel sees the messages. Use the per-channel masks (“hide customer details”, “hide prices”) for people who should not see who bought or for how much.

Contact

Questions or GDPR requests: [email protected], or the support form.