Privacy Policy
MSS Order Export: CSV & Email, operated by Mollica Software Solutions LLC ("MSS", "we", "us"). Last updated: July 28, 2026.
MSS Order Export: CSV & Email ("the App") is a Shopify application that exports your store's orders, customers, and inventory to destinations you choose, on a recurring schedule you define. This policy explains what data the App accesses, where it sends it, why, and your rights over it.
Who we are
Mollica Software Solutions LLC. Contact: Mike@mollicasoftwaresolutions.com.
Data we access and process
- Store records you export (via the Shopify API): the App reads your orders, customers, and inventory records so it can generate the CSV export you configured. These records may contain customer personal data (for example a customer's name, email address, and shipping address on an order). They are read on demand at each scheduled run and streamed straight into your chosen destination; the App does not retain a copy of the exported records in its own database.
- Schedule configuration you create: each export schedule you define — the resource, the columns/fields, any filters, the cadence and run time, and the email addresses the export is delivered to.
- Store identifiers: your
.myshopify.comdomain and app session/billing state, required to run and bill the App.
Where we send your exports
- Email: to the email addresses you specify on a schedule. When an export exceeds the email attachment limit, it is staged as a file in private object storage and delivered as a time-limited download link instead of an attachment.
Email is the App's only delivery destination.
Why we process it
To provide the App's core function (generating and delivering your scheduled exports), to alert you when a delivery fails, to operate billing, and to respond to your support requests. We do not sell your data, and we do not use it for advertising.
Where it is stored, and for how long
- Exported records: read on demand from Shopify and streamed to your destination; not retained in the App's database.
- Staged export files (the email-overflow case above): stored in private object storage and automatically deleted within 25 hours of generation, regardless of delivery outcome (a sweep runs every hour and removes anything older than 24 hours). The download link's lifetime is 24 hours, so a link never outlives its file.
- Delivery history: the App keeps a record of each run (when it ran, how many records, success or failure, and the destination domain only). This history is PII-free — it holds no customer records and no recipient email addresses, only the redacted destination domain — and is retained for 90 days, then automatically purged.
- Configuration data is stored in a PostgreSQL database (Supabase); the App is hosted on Fly.io.
Data retention and deletion
We honor Shopify's mandatory data-protection webhooks:
customers/data_request— the App stores no per-customer data, so there is no customer-specific data to surface.customers/redact— the App stores no per-customer data, so there is nothing to delete for an individual customer (exported records are not retained by the App).shop/redact— when a store uninstalls the App, we delete the store's export schedules (including the destination addresses on them) and its delivery history.
You can also uninstall the App at any time from your Shopify admin, which revokes its access.
Third parties
The App relies on Shopify (platform), Fly.io (hosting), Supabase (database and object storage), and Resend (email delivery). These providers process data only as needed to run the App.
Your rights
Depending on your jurisdiction (including GDPR and CCPA), you may have rights to access, correct, or delete your data. To exercise them, contact Mike@mollicasoftwaresolutions.com.
Changes
We may update this policy; material changes will be reflected by the "Last updated" date above.