Privacy Policy · Updated July 21, 2026

Privacy Policy

VIP Alert (the app, we) is a Shopify application operated by Taylor Sicard Consulting that helps merchants understand who their customers are. This policy explains what data we process, where it goes, and the choices merchants and their customers have.

Data we process

When a merchant installs VIP Alert, we receive order and customer data from their Shopify store: customer name, email address, shipping address (city, region, postal code, country), order values, order traffic source, and purchased items. We use this data for one purpose: identifying and classifying the merchant's customers at the merchant's direction.

Third-party data providers

To identify customers, the app queries external sources. Depending on the merchant's plan, a customer's email address and/or name and shipping locality may be shared with:

• People Data Labs and Apollo, professional-profile enrichment (job title, employer, LinkedIn)
• Serper (Google Search results), public-web corroboration and social-profile discovery
• Wikipedia and Wikidata, public-figure identification (queries contain only the customer's name and locality)

We only send the minimum fields needed for a lookup. We never sell customer data.

Cross-merchant enrichment cache

To reduce repeated lookups, successful enrichment results are cached in a shared store keyed by email address for up to 180 days. A customer identified for one merchant may therefore be served from cache for another merchant. Cache entries contain only enrichment results (professional and public-profile data), never order history, which is always isolated per merchant.

Where results go

Identification results are shown to the merchant inside the app and, at the merchant's configuration, written back to their own Shopify store as customer tags, order notes, and customer metafields, and sent to alert destinations the merchant controls (their Slack workspace, email address, or webhook endpoint).

Retention and deletion

• Customer records are retained while the merchant uses the app.
• We honor Shopify's GDPR webhooks automatically. A customer data request is logged for the merchant. A customer redaction request deletes the customer's records and their shared cache entry. A shop redaction request (48 hours after uninstall) deletes all data for that store.
• Cache entries expire automatically after 180 days.

We also rely on infrastructure sub-processors to run the service: Netlify (hosting), Neon (database), and Resend (alert email delivery). The full list, with roles, is in our Data Processing Agreement.

Merchant responsibilities

Merchants using VIP Alert are data controllers for their customers' data and should disclose the use of enrichment services in their own store privacy policy where applicable law requires it. Our processing on the merchant's behalf is governed by our Data Processing Agreement.

Contact

Questions or data requests: VIPalert@taylorsicard.com. See also our support page.