Privacy Policy

Rentby · Last updated: October 24, 2026

This Privacy Policy explains how Dropfeed LLC ("Dropfeed," "we," "us") collects, uses, and protects information when you install and use Rentby (the "App") on your Shopify store. By installing the App, you agree to this policy.

1. Information we access

When you install Rentby, we access the following through the Shopify Admin API and related APIs, only as needed to provide the App:

Store details: your store name and domain, and your store's time zone, so rental dates follow your own calendar.
Rental products: the products and variants you mark as rental items: their IDs, titles, variant titles and image. The App writes its own app-owned metafields on those variants, holding the rates you set and the date ranges already booked, so the product page, the cart and checkout all use the same price and availability. It also sets those variants to keep selling when Shopify's stock count reaches zero, because the App counts your rental units itself.
Deposit product: the App creates one hidden product in your store called “Refundable rental deposit”. It is used only to add a deposit to the cart as its own line. It is unlisted, needs no shipping and is not taxed.
Limited order data: when an order is created, cancelled, edited or refunded, Shopify notifies us (orders/create, orders/cancelled, orders/edited, refunds/create) and we read only what the App needs to hold and release your units: the order ID and order number, line item IDs, the products, variants and quantities, the line item properties the App itself wrote (_rentStart, _rentEnd and _rentKey), and the deposit amounts. We use them to record each rental against your units and your plan's monthly allowance, and to free the units again when a rental is cancelled, refunded or edited out of an order.
Deposit refunds (only when you click Refund deposit): to send a refund, the App reads that order's payment transaction reference and gateway name and asks Shopify to refund the amount you chose on the deposit line. Shopify sends the customer its usual refund email. Card and payment details are never read or stored.
Order tags: when an order with a rental arrives, the App adds its own tags to that order: rental, rent-out-YYYY-MM-DD and return-YYYY-MM-DD, so tools like Shopify Flow can send reminders without us holding any customer details. It never removes or changes your other tags.
Calendar link (only if you create one): the App stores one random code for your store. When a calendar app opens the link, the App returns your rentals from its own records (order number, item, units, dates and status). No customer names, emails, phone numbers or addresses are included. Those details are held in memory for up to 10 minutes so a calendar app checking often does not repeat the work, and are not written to storage. You can replace the code or turn the link off at any time, and it is deleted when you uninstall.
Receipt printer (only if you connect one): to print a slip for a new rental order, the App uses the order number, the rental dates, each rental item's name and quantity and any deposit paid, and keeps the slip text until your printer has printed it, then for 7 days so you can reprint it, after which it is deleted. Your printer collects slips through print.dropfeed.io, a Dropfeed relay that passes them on and stores nothing. No customer details are read or printed.
Your own notes: a condition note you type when you check a rental back in is stored with that rental.
App usage & billing status: basic operational logs and your subscription plan/status (managed through Shopify).
Email updates contact (optional): if you add an email address in the Email updates box in the App, we store it, together with your store's name so emails can greet you by it. We never take an email address from your Shopify account. Leave the box empty and we store nothing.

We do not read, store, or transmit your customers' names, email addresses, phone numbers, shipping or billing addresses, or payment details. Those fields may be present in the order notification Shopify sends us, but the App does not access them and never writes them to our database. Rentby stores no customer personal data at all.

2. How we use information

To work out which dates each rental item is free, from the units you own, the rentals already booked, buffer days, open days, notice, booking window and blackout dates.
To price each rental from the rates you set and add the deposit you set, and to check the dates again at checkout so a unit is never double booked.
To show you what goes out, comes back and is late, on the Today screen and the calendar, and to refund a deposit when you ask.
To count rentals in the current month, so we can apply your plan's allowance.
To operate, secure, and support the App, and to administer billing.
If you gave us an email in the App: to tell you when your store nears or reaches its plan's monthly allowance, and occasionally about a major update. Every email has an unsubscribe link.

We do not use your data, or your customers' data, to train machine-learning models, and the App makes no automated decisions that have legal or similarly significant effects on any individual.

3. Protected customer data

Shopify classifies order data as protected customer data. In line with Shopify's requirements, we:

process only the minimum data needed to provide the App's rental, deposit and plan-limit functions;
tell you here what we process and why, and limit our processing to those stated purposes;
do not sell personal data, and do not share it for advertising, profiling, or analytics;
apply retention limits (see section 6) rather than keeping data indefinitely;
encrypt data in transit and at rest; and
make this policy, together with our Terms of Service, our data protection agreement with you. If your organization requires a separate signed data processing agreement, email us.

Because the App does not process customer names, addresses, phone numbers, or email addresses, we request only Level 1 protected customer data access, the minimum level Shopify offers, for the order details described above.

4. Sub-processors

We rely on infrastructure sub-processors to run the service:

Fly.io: application hosting and database.
Shopify: platform, authentication, checkout, refunds, and billing.
Hostinger: email delivery, only if you add an email address in the App.

Rentby does not use any AI provider and does not send your data to advertising or analytics networks. These sub-processors process data only to provide their services to us, under their own terms and security commitments.

5. Data sharing

We do not sell your data. We share information only with the sub-processors above to operate the App, or where required by law.

6. Data retention and deletion

While the App is installed we store your settings, your rental items and their rates, the rentals booked against them (order ID and number, line item IDs, item, quantity, dates, status, deposit amounts and refunds, check-out and check-in times, and any condition note you typed), blackout dates, printer slips for up to 7 days, and a count of rentals for the current and recent months. None of that includes customer personal information.

When you uninstall the App or request deletion, we delete your store's associated data within 30 days, except where we must retain limited records for legal or accounting purposes. The “Refundable rental deposit” product is part of your store, so it stays in your products after you uninstall, and past orders keep their deposit lines. You can delete it yourself.

We honor Shopify's mandatory compliance webhooks, customers/data_request, customers/redact, and shop/redact. Because the App stores no customer personal data, a customers/redact request has no personal data to remove; a shop/redact request deletes your store's settings, rental items, rentals, blackout dates, rental counts, printer slips, email updates contact, and sessions from our systems.

The email updates contact is deleted as soon as you uninstall, and its address is cleared the moment you click Unsubscribe in the App or unsubscribe from an email.

7. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS) and at rest, access controls, and least-privilege API scopes. The App requests only what its features use: read_products and write_products (rental items, their metafields and the deposit product), read_orders and write_orders (recording rentals, order tags and deposit refunds), and write_cart_transforms and write_validations (rental prices and the availability check at checkout). No method of transmission or storage is 100% secure, but we work to protect your information.

8. Your rights (GDPR, CCPA, and similar)

Depending on your location, you may have rights to access, correct, export, or delete your data, and to object to or restrict certain processing. To exercise these, email support@dropfeed.io and we will respond as required by law. We do not sell personal information.

9. International transfers

Your data may be processed in the United States and other countries where we or our sub-processors operate. We take steps to ensure appropriate safeguards for such transfers.

10. Children

The App is for business use and is not directed to children. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date. Material changes will be communicated where appropriate.

12. Contact

Dropfeed LLC
Navarre, FL
Email: support@dropfeed.io

← Back to Dropfeed