Privacy policy

Operator and contact

KeyHarbor is operated by 杰客森.

What KeyHarbor does

KeyHarbor processes store and order information to deliver digital codes, let buyers collect them, and help merchants manage delivery problems. Merchants control their customer orders and respond to customer data requests. KeyHarbor also processes merchant information to operate the app and its subscriptions.

Information used by the app

• Store identifiers, store branding and support contact details, Shopify installation and session information, and app subscription status and dates.
• Administrator email addresses supplied by merchants and their low-stock notification preferences.
• Order identifiers, buyer order email addresses, purchased items and quantities, payment and fulfillment status, risk assessments, and refund or cancellation information.
• Codes supplied by merchants, product-to-code mappings, assignments, collection credentials, and delivery or replacement history.
• Customer identifiers and order references supplied with Shopify data-access or deletion requests.
• Operational records such as delivery attempts, request times, and authenticated merchant access records. Access records use shop-specific fingerprints for staff and resource identifiers.
• Information you choose to provide when contacting support. Hosting and email services may also process connection and delivery logs.

The order integration does not request buyer names, postal addresses, phone numbers, or payment-card details. Shopify installation sessions may contain merchant or staff account details supplied during authentication.

How information is used

We use this information to allocate purchased codes, send transactional collection links, process resends and replacements, manage app access and subscription notices, and handle privacy requests. Payment and risk information can place delivery on hold for merchant review. Refunds and cancellations can revoke access to codes through KeyHarbor. They do not invalidate a code already redeemed with its issuer.

If a merchant enables low-stock emails, we use the administrator email address they provide to send reminders about code-pool stock. This address is separate from the store's customer support address and is not used for marketing.

The app does not use buyer emails for marketing or include advertising pixels. Customer data is not used for sale or advertising profiling. Shopify handles app subscription checkout; KeyHarbor does not collect card details.

Service providers and processing locations

Shopify provides store, order, authentication, and app-subscription information. Railway hosts the app and database, currently in the United States. KeyHarbor's transactional email delivery uses Resend technology. Resend processes recipient addresses and message content to deliver these emails and stores this data in the United States. Buyer notification emails contain collection links rather than code values.

The operator is based in China and may access information for support, administration, and security. Data may therefore be processed in China and the United States, outside the merchant's or buyer's country. Recipient email providers also process delivered messages under their own policies. Contact us for questions about providers, processing locations, or international transfers.

Retention and deletion

Buyer order and delivery records are kept for three years from the latest delivery or aftercare action, such as first collection of newly assigned codes, review, resend, replacement, refund, or cancellation. Orders without these actions use their initial receipt date. Routine Shopify synchronization does not extend this period. The worker checks for expired records hourly in bounded batches. After deletion, KeyHarbor can no longer provide collection or resending for that order. A collection link's 30-day expiry does not delete order records.

Expiry removes order details, associated delivery notifications, assignments, queued jobs, and order-linked activity records. Previously assigned codes are quarantined, and a keyed order fingerprint prevents old events from recreating the order. This fingerprint remains until the store's application records are deleted and cannot be used by itself to recover order details.

Authenticated merchant data-access audit records are retained for 180 days. The worker checks for expired access records hourly and deletes them in batches. These are separate from order activity records, which follow the order retention period. Worker interruptions or a cleanup backlog can delay scheduled deletion until processing resumes.

Resend retains outgoing email and delivery-log data for 30 days under its standard service retention policy. Its separate backup retention is seven days. These provider records are separate from the app's order and notification records described above.

Copies sent through our previous sending service may remain in our legacy sending mailboxes. These KeyHarbor copies are scheduled for deletion after one year (365 days). An hourly task checks the sent and deleted-message folders and removes expired copies in batches. Cleanup records contain counts and status, not message content, and are also deleted after 365 days. Interruptions or a backlog can delay cleanup until processing resumes. This cleanup does not delete messages from recipients' mailboxes or control the previous provider's independent logs and backups. Contact us to coordinate requests involving our email providers.

When Shopify sends a customer deletion request, KeyHarbor removes matching order and notification records and their code assignments. Previously assigned codes are quarantined instead of becoming available for another buyer. A keyed order fingerprint remains to prevent old events from recreating deleted orders.

Completing a customer data-access request clears its saved customer details and disables that export. The request identifier and processing status remain. Uninstalling disables the store and removes its installation sessions; a subsequent Shopify store-deletion request removes that store's application records, including subscription records, remaining inventory, access audits, and request identifiers.

Files already downloaded by a merchant and records held by external mail services are outside this application deletion process. Contact us to coordinate requests involving our sending service.

Backups and recovery

Our servers create encrypted database backups daily and transfer them directly to a restricted backup server. Each copy is scheduled for deletion after 30 days and may be removed earlier to stay within our storage limit. Automated cleanup runs hourly, including when no new backup is created. Service interruptions can delay scheduled backups or cleanup until processing resumes.

A deletion from the live database does not edit existing encrypted backup files. These copies are restricted to recovery and expire under the 30-day rule. Before a recovered database can return to service, the recovery procedure requires reapplying subsequent customer and store deletions, uninstallations, and retention expiry. A restored database must not return to service if those changes cannot be accounted for.

Before processing deletion, uninstall, or completed data-access requests, we keep a separate encrypted recovery record containing the identifiers needed to reapply those changes after a restore. These records are retained for 31 days to cover the backup period and cleanup timing. They do not contain email message bodies, digital codes, or access tokens. Encrypted administrator operation records are retained for 180 days and record the operator, purpose, scope, time, and outcome without storing customer query results.

Protection and access

The application encrypts stored digital codes, buyer order and administrator notification email addresses, recoverable collection credentials, and saved privacy-request details. Merchant access is authenticated through Shopify and scoped to the store. Collection links are private credentials: keep them confidential and contact the merchant if one is exposed.

Requests and contact

Buyers should contact the store where they ordered to request access, correction, deletion, or restriction of use of their order information. Merchants can receive customer data exports through the app's privacy-request workflow. For questions about KeyHarbor, contact contact@mistcada.com. Please do not send passwords, codes, or full collection links by email. We may ask for information needed to verify and locate a request. Applicable privacy law may provide additional rights, including objection, portability, or a complaint to a relevant supervisory authority.

Changes to this policy

Updates are published on this page with a revised effective date. Merchants should review the policy when the app's processing or their use of it changes.