Producer Ready Privacy Policy

Last updated: November 8, 2026

Producer Ready is a Shopify app that helps merchants understand their obligations under US state packaging Extended Producer Responsibility (EPR) programs. This policy describes what data the app processes, why, and how long it is kept.

What the app reads

From a store that installs Producer Ready, the app reads order totals and, for each order, only the destination province or state and country of the shipping address. It also reads the store's product catalog (titles and identifiers) so merchants can record packaging information per product.

What the app never collects

The app does not collect or store customer names, street addresses, email addresses, phone numbers, or payment details. Shipping addresses are reduced to a state and country at the moment an order is read; the rest of the address is never written to any Producer Ready system.

What the app stores

• Sales aggregates: revenue and order counts per US state for the trailing 12 months, recomputed from order data and cached for up to 24 hours.
• Packaging records that the merchant enters (product, component, material, weight).
• Session data Shopify requires for the app to stay signed in. Session data is deleted automatically when the app is uninstalled.

How data is used

Stored data is used only to compute the merchant's own EPR exposure analysis and reports inside the app. Data is never sold, rented, or shared with third parties for marketing, and never used to profile individual customers.

Retention

Aggregates and packaging records are kept while the app is installed so the merchant can use them. When the app is uninstalled, session data is deleted automatically; a merchant can also contact us at any time to have all of their store's stored data deleted, and we will complete deletion within 30 days.

Security

Data moves only over encrypted (TLS) connections and is stored on infrastructure that encrypts data at rest. Access is limited to the app operator. The app's security incident response procedure covers detection, credential revocation, and notification of Shopify and affected merchants.

Subprocessors

Producer Ready runs on Shopify's platform and is hosted on Railway. Those providers process data only to operate the app.

Contact

Questions about this policy or a store's data can be sent to the developer through the contact details on Producer Ready's Shopify app listing page.