Privacy policy: Role Pricing & Entitlements

Last updated October 13, 2026

Who we are

Role Pricing & Entitlements is a Shopify app made by Adam Chiaravalle of ACWebDev, LLC (doing business as amplifi.studio), Chattanooga, Tennessee, USA. Shopify lists the developer as Adam Chiaravalle. Contact: hello@amplifi.studio.

What the app stores

Nothing outside your Shopify store. The app has no database. Your settings (the customer tags, product types, vendors, percentages and quantity limits you enter) are saved as app metafields on your discounts and checkout rules, inside your own store.

What the app reads at checkout

Shopify runs the app's functions inside Shopify. For each cart they receive only: whether the signed-in customer has the specific tags your settings name (yes or no for each tag), each cart line's ID, quantity, product ID, product type and vendor, whether the product is a gift card, the available shipping options with their internal identifier, price and delivery method (shipping, local delivery or pickup), the cart's currency and the store's currency exchange rate for the cart, the discount's type, and your saved settings. They return a discount or quantity-limit decision and keep nothing.

The functions do not receive customer names, email addresses, phone numbers, addresses, payment details or order history, and cannot see any tag your settings do not name. The app requests only two permissions: manage discounts and manage checkout rules.

Shopify's install screen notes that every app can see the store owner's basic contact details. This app makes no calls to Shopify's Admin API from any server, so it never requests, receives or keeps those details.

The app pages

The app's home page inside Shopify admin and this policy are served by Cloudflare Workers. The home page loads Shopify's own App Bridge and Polaris scripts from Shopify's CDN and nothing else: no analytics, no tracking, no cookies set by the app. When the home page opens, App Bridge requests a session token from Shopify; the token is not stored or sent anywhere.

Like any web host, Cloudflare processes the IP address and request details of each page request to deliver it. The app has request logging turned off and keeps nothing. Cloudflare may also ask browsers to send it network-error reports (the standard NEL mechanism), which include the browser's IP address, so it can keep the service running.

Privacy webhooks

Shopify sends public apps three privacy notifications: customer data request, customer redaction and shop redaction. The app verifies each request's signature and acknowledges it. Because the app stores no customer or shop data outside Shopify, there is nothing to return or erase. Webhook contents are not logged or kept.

Service providers

• Shopify: runs the app's functions and stores your settings in your store.
• Cloudflare: hosts the app home page, this policy and the privacy webhook endpoint.

Retention and deletion

The app keeps no data of its own. Your settings live in your store as part of the discounts and checkout rules you create; deleting those removes the settings. Uninstalling the app stops its functions from running.

Changes

If this policy changes, the date above is updated.