Privacy Policy

SentryCart, a product of Pema Software, Inc. · Last updated July 2026

Overview

SentryCart is a fraud-protection app for Shopify stores. It screens a merchant’s incoming orders for fraud and chargeback risk. This policy explains what data SentryCart processes, why, and how it is protected.

What we process

When a merchant installs SentryCart, we receive each new order from Shopify and read the details needed to assess fraud risk: billing and shipping address, email, phone number, order totals, and line items. We store a compact risk record for each order (order number, customer email, order total, risk level, and the reasons for that level). We also store identifiers a merchant chooses to block, so repeat fraud can be caught.

We never access or store payment card numbers or payment credentials. Shopify handles all payment data; SentryCart only sees order metadata.

Why we process it

Solely to score orders for fraud and chargeback risk for the merchant whose store the data belongs to. We do not use customer data for marketing, advertising, resale, profiling across unrelated merchants, or model training, and we never sell it.

How it’s protected

Data is encrypted in transit (HTTPS/TLS) and at rest (encrypted database storage). Access is limited to the app’s operator. API credentials are stored as secure environment variables and never shared.

Retention and deletion

We keep only the compact order-risk records described above. SentryCart implements Shopify’s required privacy webhooks and will delete a customer’s data upon a redaction request, and all of a store’s data after the store uninstalls the app. Merchants or their customers may also request deletion by contacting us.

Subprocessors

SentryCart runs on managed cloud infrastructure (Render) that hosts the application and database. No other third parties receive customer data. The fraud-scoring engine runs within the app and does not send order data to any external scoring or AI service.

Your rights

Consistent with GDPR, CCPA, and similar laws, individuals may request access to, correction of, or deletion of their personal data. Requests are handled through the merchant’s store or by contacting us directly.

Contact

Questions or requests: support@pema.software
Pema Software, Inc. · Cleveland, Ohio

Changes

We may update this policy as the app evolves. Material changes will be reflected here with a new “last updated” date.