Legal

Privacy Policy

Operated by OOTHEMES LLC

Foxlendar provides a hotel and accommodation booking solution for Shopify merchants. This policy explains what data the app accesses, why, how it is stored, and the rights of merchants and their customers.

1. Information we access

With the merchant's authorization, the app accesses:

We never receive payment card data — all payments are processed by Shopify Checkout.

2. How we use it

Data is used only to operate the booking features the merchant enabled: creating and managing bookings, calculating availability and rates, syncing booking status with Shopify orders, and (on Premium) synchronizing availability with external calendars chosen by the merchant. We do not sell data or use it for advertising.

3. Storage

Data is stored on a dedicated server (DigitalOcean, US region) and transmitted over HTTPS/TLS. Access to production is restricted to authorized OOTHEMES LLC personnel.

4. Retention & deletion

Data is retained while the app is installed. We comply with Shopify's mandatory privacy webhooks: customers/data_request, customers/redact (we erase a customer's personal fields), and shop/redact (we delete the shop's data after uninstall).

5. Sharing with third parties

We share data only with Shopify, and — when channel sync is enabled — the external calendar providers (iCal channels such as Airbnb, Booking.com and Vrbo) required for synchronization. No other sharing except where required by law.

6. Security

All traffic uses HTTPS/TLS. Storefront API requests are verified through Shopify App Proxy with HMAC signatures, and webhooks are verified using HMAC-SHA256.

7. Your rights & contact

Merchants and customers may request access, correction or deletion of personal data by contacting us at [email protected]. Customer requests submitted through Shopify are handled automatically via the webhooks above.

This page is provided for transparency and App Store review. For legal questions, contact us at the email above.