Privacy Policy — POS e-Sign

Last updated: 2025-09-16

Who we are. Altitude Studios Inc. (“we”, “us”) provides the POS e-Sign app for Shopify merchants

(“Merchants”). For customer data collected through the app, the Merchant is the data controller and we act as a processor/service provider.

What we process. Customer inputs a Merchant configures in POS (e.g., name, email/phone, optional IDs or

answers), items/rental selections, and consent method (signature image or “I agree”).

How we use it. Generate a waiver PDF and help the Merchant store and retrieve that record; operate, secure,

and support the app.

Where data lives.

Shopify Files: The waiver PDF is uploaded to the Merchant’s Content → Files.
Our app database (Render): We store minimal waiver metadata (e.g., customer name/email,
timestamps, and the PDF URL) to power features like lookups. We do not sell data.

Sharing. Only with infrastructure/service providers that host or operate the app (e.g., Render) and with

Shopify as needed, or where required by law. No data is sold.

Retention & deletion. Merchants control PDF retention within Shopify Files. App-side metadata is retained

while the Merchant uses the app or as needed for support/security/legal obligations, and is deleted on

verified request. We honor Shopify’s mandatory GDPR webhooks (customers/data_request,

customers/redact, shop/redact).

Security. HTTPS, scope-limited Shopify tokens, least-privilege access. No payment card data is processed by

this app.

Children’s data. Merchants are responsible for complying with local laws when collecting data from minors.

Changes. We may update this policy; we’ll post the new effective date above.

Mailing address: Altitude Studios Inc., 234 Sugar lake Rd, Cherryville, BC, VoE 2G2, Canada