What Typo Rescue reads, what it does with it, and what it keeps.
Typo Rescue reads recent orders from the Shopify store it is installed on. For each order it uses:
It does not request the customer's name, phone number, or address. Shopify classifies those as separate protected fields, and the app is not approved to read them.
Each address is checked for spelling mistakes, malformed syntax, and whether its domain accepts
mail at all. Only the domain is looked up in DNS — never the full address. When you
accept a suggested correction, the app writes the corrected address back to that order and tags
it typo-rescue-fixed so the change is visible in Shopify's own history.
Addresses are held in memory only for as long as it takes to render a page, then discarded and re-read from Shopify next time. The only thing stored on disk is a list of order IDs you have marked as fixed or dismissed, so the app doesn't ask you twice.
Those records are deleted automatically after 30 days. DNS results are cached in memory, keyed on domain only, and are lost on restart.
Only staff of your own store. Signing in happens through Shopify itself — the app is opened from your admin and Shopify vouches for who you are, so there is no separate password and no account to create. Every request is checked against a signed token issued for your store alone, which is also what keeps one store's data out of another's dashboard.
Nothing is sent to any third party. There is no analytics, no tracking, and no external service involved. Data travels between this app and Shopify's API, and nowhere else.
Uninstalling the app revokes its access immediately and deletes the stored access token and every decision record for your store. Shopify also sends a formal erasure request 48 hours after uninstall, which triggers the same deletion again as a safeguard.
If a customer asks what personal data the app holds on them, the answer is none — so there is nothing to export and nothing to erase. Requests of that kind are answered automatically.
Typo Rescue is operated by the developer of firstx.app, who is the data controller for anything described above. For privacy questions, data requests, or to ask what is held for your store, email evita@firstx.app. We reply within two business days, and to formal data requests within 30 days.
If what the app reads or keeps ever changes, this page changes with it and the date below is updated. Material changes are also announced in the app itself.