Privacy Policy

Effective date: September 14, 2026

Provider: Banton Digital Group LLC

Privacy contact: nicholas.banton@gmail.com

1. Purpose

FraudLock helps Shopify merchants review potential order-fraud signals. It creates a risk recommendation and an evidence trail for a merchant's manual review. FraudLock does not automatically cancel orders, issue refunds, hold fulfillment, contact customers, or make decisions with legal or similarly significant effects on customers.

2. Data FraudLock processes

FraudLock is designed to minimize personal data. For the risk-review service, it processes:

order identifiers, timestamps, totals, and relevant order/risk status;
customer and order identifiers needed to associate an order with its review;
the order email address only to derive an email-domain risk signal;
billing and shipping country only to identify a country-mismatch signal; and
FraudLock-generated recommendation, merchant decision, notes, and evidence records.

FraudLock does not request customer names or phone numbers. It does not use customer data for advertising, marketing, sale, or cross-store profiling.

3. How data is used and disclosed

FraudLock uses this data only to display a risk recommendation, explain the signals behind it, preserve the merchant's review decision, support the app, and meet applicable legal and Shopify compliance obligations. Data is not sold or shared for third-party advertising. It is processed by Shopify and by our hosting and database providers (Vercel and Neon).

4. Retention and deletion

Closed FraudLock risk cases, their evidence and packets, and inactive customer profiles are deleted after 180 days. Active, reviewing, and chargeback cases remain available while unresolved. Shopify redaction requests take precedence and trigger deletion of the relevant FraudLock records.

5. Customer data requests and merchant support

Merchants may contact nicholas.banton@gmail.com with questions about FraudLock's data handling. FraudLock responds to Shopify's mandatory customer data, customer-redaction, and shop-redaction compliance webhooks.

6. Security

FraudLock uses merchant-scoped application permissions so a merchant's users can access only that merchant's records, with separate development and production environments and managed access controls.

7. Changes and contact

FraudLock will update this notice when its data practices materially change. Questions may be sent to nicholas.banton@gmail.com.