Privacy policy

Effective 7 October 2026

PayGate ("the app", "we") is a Shopify app made by Vexous Labs. It lets merchants customize their checkout: hiding, renaming and reordering payment and shipping methods, and blocking orders that don't meet their rules. This policy explains what information the app handles when you install and use it, and why.

Information we store

When you install PayGate, Shopify gives the app an access token so it can work with your store. We store:

• Your shop's domain (for example your-store.myshopify.com).
• The access token and session details Shopify issues to the app, so we can manage your checkout rules through Shopify's API on your behalf.

We don't store your staff's names or email addresses, and we don't keep copies of your products, orders or customers.

Your rules are stored in Shopify

The rules you create (their names, conditions and settings) are saved in your Shopify store, attached to the checkout customizations the app creates, rather than in our own database.

Customer information at checkout

To decide which payment and shipping methods to show, the app's checkout logic runs as Shopify Functions on Shopify's own servers. Shopify gives these functions the information each rule needs, such as the cart contents and totals, the shipping country or postcode, or whether the customer is logged in or has a certain tag.

This information is used only to apply your rules during that checkout. It isn't sent to us, and we don't receive, store or share it.

Billing

Charges for paid plans are handled by Shopify and appear on your Shopify invoice. To check which plan your store is on, the app asks Shopify for your store's subscription status. We never see or store payment card details.

Service providers

We use these providers to run the app:

• Fly.io: hosts the app's server (Singapore region).
• Neon: hosts the database that stores the shop and session details above (Singapore region, on Amazon Web Services).
• Shopify: runs the checkout functions, stores your rules and handles billing.

Our hosting provider keeps standard server logs (such as request times and error messages) for a limited time to keep the service secure and working.

When you uninstall

When you uninstall PayGate, its checkout rules stop running and we delete your store's session data. When Shopify asks us to delete your store's data (48 hours after uninstalling), we confirm that nothing remains.

Data requests and deletion (GDPR, CCPA and similar laws)

The app handles Shopify's privacy requests:

• Customer data requests and deletion requests: we don't store your customers' personal information, so there's nothing to provide or delete.
• Shop deletion requests: we delete everything we hold about your store.

You can also contact us at any time to ask what we hold about your store or to have it deleted.

Security

Data is encrypted in transit (HTTPS/TLS), and our database connections require encryption. Access to production systems is limited to the people who maintain the app.

Changes to this policy

If we change this policy, we'll update this page and its effective date. Significant changes will be announced in the app's changelog.

Contact

Questions about privacy? Email hello@labs.vexous.com.

This website

The policy above covers the PayGate app. This section covers only this website. It uses Google Analytics to count visits and see which pages are useful. It sets cookies (_ga and _ga_*, kept for up to 2 years) and sends Google your page views, device and browser type, approximate location and the page you came from. We turn off advertising features and Google signals, and we don't use the information for ads.

If you're in the European Economic Area, the United Kingdom or Switzerland, analytics cookies stay off until you press “Allow” in the cookie banner. Elsewhere they're on unless you press “Decline”. You can change your choice at any time with “Cookie settings” at the bottom of every page. Without cookies, Google may still receive a basic, cookieless signal that a page was viewed.

The website's fonts are hosted on the website itself. The live demo runs in your browser and sends nothing to us. Website analytics is separate from the PayGate app: nothing about merchants' stores or their customers is sent to Google Analytics.