Privacy Policy

Covered (“the app”) helps Shopify merchants register product warranties and handle warranty claims. The app is operated by Leonid Manuilov, a sole proprietor. This policy explains what data the app processes, why, and how it is protected. Questions: support@coveredapps.com.

Roles

For data about a merchant’s customers, the merchant is the controller and Covered acts as a processor on the merchant’s behalf. For data about the merchant’s own account (store domain, staff contact email), Covered is the controller.

What we collect

• From the merchant’s store via the Shopify API: store domain, product titles, and — when automatic registration is on — the email, first and last name, order number and purchase date of fulfilled orders.
• From customers who register a product or file a claim: email, optional name, product, optional serial number, where and when they bought it, their description of the problem, photos they choose to upload, and messages exchanged with the merchant.
• From merchants: warranty policies, app settings, a support email address, and claim decisions.

We do not collect payment card data, passwords, phone numbers or shipping addresses, and we do not use cookies or trackers on customer pages.

How we use it

• To show warranty cards, keep a record of ownership, and let customers file and follow claims.
• To let merchants review and resolve claims, including creating $0 replacement draft orders in their own store.
• To send transactional emails (warranty confirmation, claim updates). Marketing emails are only possible if the customer opts in, and are sent by the merchant, not by Covered.
• On the Growth plan, the claim text, photos and policy terms are sent to an AI model to produce a suggested assessment for the merchant. The merchant always makes the decision. This data is not used to train models.

We never sell personal data or use it for advertising.

Sub-processors

• Shopify — platform and billing
• Vercel — application hosting (United States)
• Supabase — database hosting (United States)
• Resend — transactional email delivery
• Anthropic — AI claim pre-checks (Growth plan only)

Retention and deletion

• Data is kept while the app is installed so warranties remain valid for their full term.
• When Shopify sends a customer redaction request, we delete that customer’s registrations and claims.
• After a merchant uninstalls the app, Shopify sends a shop redaction request and we delete all of that store’s data.
• Merchants can export their data at any time and can ask us to delete it sooner by email.

Security

Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers. Access is limited to the operator for support and maintenance. Customer pages are reachable only through unguessable links sent to the customer.

Your rights

Customers can ask the merchant they bought from to access, correct or delete their data; merchants can do this from the app or by contacting us. You can also contact us directly at support@coveredapps.com. We respond within 30 days.

Changes

We will update this page when our practices change and note the date above.