Privacy Policy (KeyDispatch)
Last Updated: December 10, 2025
1. Introduction
Semantic Devs ("we", "us", "our") is committed to protecting your personal information and your business data. This Privacy Policy explains how we collect, use, and share information when you install or use the KeyDispatch application (the "App") through the Shopify App Store.
2. Information We Collect
To provide automated digital fulfillment services, we access specific types of merchant and customer data:
2.1. Merchant Information
We collect data required for account management and authentication:
- Shop Domain: Your primary URL (e.g.,
yourstore.myshopify.com).
- Access Tokens: Encrypted keys used to authenticate API requests and listen for order webhooks.
- Contact Email: The primary email address associated with the store for billing and support notifications.
- Inventory Data: The license keys, serial numbers, access codes, or PINs you upload to the App's secure vault.
2.2. Customer & Order Data
When an order is placed on your store, we process the following information to fulfill the delivery:
- Customer Contact Info: We process the Name and Email Address associated with new orders strictly for the purpose of emailing the digital product.
- Order Details: We read Line Items (Product IDs and SKUs) to match the purchased item with the correct license key in your inventory.
- Shopify Order ID: We link specific keys to specific Order IDs to prevent duplicate distribution.
3. How We Process Your Data
Our processing model is designed to be automated and transactional:
3.1. The Fulfillment Workflow
- Event Trigger: We listen for the "Orders Paid" webhook from Shopify.
- Allocation: Our system searches your uploaded inventory for an available key, marks it as "SOLD," and permanently links it to the specific Shopify Order ID.
- Dispatch: The assigned key and the customer's email address are transmitted to our email service provider (Resend) to send the immediate delivery notification.
4. Data Sharing & Third Parties
We share data only with the infrastructure providers necessary to deliver the Service:
- Resend: We transmit customer email addresses and the purchased license key to Resend for the sole purpose of delivering the transactional email.
- Railway / AWS: For hosting our application logic and secure database.
- Redis Cloud: For managing background job queues to ensure high-volume delivery.
- Shopify: We interact with Shopify's APIs for billing and store data access.
We do not sell, trade, or otherwise transfer your personally identifiable information or your inventory data to outside parties for marketing purposes.
5. Data Retention & Removal
5.1. Retention Periods
- Account Metadata: Retained as long as the App is installed.
- Inventory Logs: We permanently retain records of "SOLD" keys linked to Order IDs. This is necessary to ensure you maintain a valid transaction history for support, refunds, and chargeback disputes.
- Unsold Inventory: "AVAILABLE" (unsold) keys are deleted from our system if you uninstall the App and request data deletion.
5.2. Automatic Removal
If you uninstall the App, we receive a shop/redact webhook from Shopify. Upon receipt, our system automatically deletes your Access Token, severing our connection to your store.
5.3. "Right to be Forgotten"
You may request full deletion of all activity logs and inventory history by emailing data@semanticdevs.com. We will process this request within 30 days in accordance with GDPR/CCPA regulations.
6. Changes to This Policy
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.