Shield Terms of Service

Last updated: 27 September 2026

These terms apply between om enterprise ("we") and the merchant who installs Shield ("you"). By installing Shield you agree to them and to the Data Processing Terms below.

The service

Shield scores Shopify orders for fraud and bot activity, can flag, hold or (if you enable it) cancel orders, and can stop checkouts from automated browsers or from devices and emails linked to orders you blocked. Fraud detection is probabilistic: Shield reduces risk but cannot guarantee that every fraudulent order is caught or that no legitimate order is flagged. You remain responsible for decisions about your orders and customers.

Plans and billing

Paid plans are billed by Shopify through your Shopify invoice. You can upgrade, downgrade or cancel in the app at any time. When the monthly scan limit of your plan is reached, Shield tells you and stops scanning new orders until the next month or until you upgrade.

Acceptable use

Use Shield only for fraud and bot prevention for your own store, in line with Shopify's terms and applicable law.

Liability

Shield is provided "as is". To the extent permitted by law, our total liability is limited to the fees you paid for Shield in the three months before the claim, and we are not liable for indirect or consequential losses, including lost sales.

Data Processing Terms

Roles. You are the controller of your customers' personal data; we process it as your processor, only to provide Shield and only on your documented instructions (these terms and your Shield settings).
Data and purpose. The data processed and the purposes are described in the Privacy Policy. We do not sell personal data or use it for any other purpose.
Confidentiality. Only authorised personnel bound by confidentiality can access personal data, and only when needed to operate or support Shield.
Security. We maintain encryption in transit and at rest, hashing of identifiers, least-privilege access with strong authentication, access logging and a written security incident response procedure.
Sub-processors. Shopify, Railway (hosting) and, when enabled, IPQualityScore. We will update the Privacy Policy before adding a new sub-processor.
Incidents. We will notify you without undue delay, and within 72 hours of becoming aware, of a personal data breach affecting your store, and help you meet your obligations.
Data subject requests. We support your obligations through Shopify's customer data request and redaction webhooks, which Shield processes automatically.
Retention and deletion. Data is kept only for the periods in the Privacy Policy and all of your store's data is deleted after you uninstall Shield, when Shopify sends the shop/redact request.
Audits. We will provide information reasonably needed to demonstrate compliance with these terms.

Contact

Questions about these terms: chandanrajawat1998@gmail.com.