PeoplesShield Privacy Policy

Last Updated: January 5, 2026

1. Introduction

PeoplesShield ("we," "our," or "us") is committed to protecting the privacy and security of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our fraud detection application for Shopify and WooCommerce merchants.

1.1 Shopify Data Processing Addendum Compliance

This app complies with and is subject to Shopify's Data Processing Addendum (DPA). When you use PeoplesShield, Shopify acts as the Data Processor on your behalf as the merchant (Data Controller). PeoplesShield operates as a service provider processing data according to Shopify's instructions and the Shopify DPA.

2. Information We Collect

2.1 Order Data

When analyzing orders for fraud, we collect only data necessary for fraud prevention:

• Customer email addresses (for verification and spam detection)
• Customer phone numbers (for validation and carrier lookup)
• Customer names (for blacklist checking)
• Customer IP addresses (for geolocation, VPN, and proxy detection)
• Order values and timestamps (for velocity and anomaly detection)
• Order notes and URLs (for malicious link scanning)

2.2 Information We Collect Directly

For app functionality and support:

• Shop Information: Shop domain during installation
• Support Communications: Messages sent to our support
• Session Data: Essential cookies for authentication only

3. Our 14 Fraud Detection Tools

PeoplesShield analyzes orders using the following tools:

• Phone Intelligence: Validates phone numbers, detects VOIP, checks carrier information
• Email Intelligence: Checks spam databases, validates deliverability, detects disposable emails
• Name Blacklist: Checks customer names against merchant-reported fraud database
• GeoIP Analysis: Determines customer location from IP address
• VPN/Proxy/Tor Detection: Identifies customers using anonymizing services
• DNS Leak Detection: Analyzes network configuration for suspicious patterns
• Disposable Email Detection: Identifies temporary/throwaway email addresses
• Price Anomaly Detection: Flags unusual order values
• Link Scanner: Scans order notes for malicious URLs
• Order Velocity: Tracks order frequency patterns
• Store-Wide Velocity: Detects sudden order spikes indicating botnet attacks
• IP Velocity: Identifies multiple rapid orders from the same IP address
• Email Domain Clustering: Detects multiple orders from the same unusual email domain
• Rapid Fire Detection: Catches bot patterns placing orders faster than humanly possible

4. Third-Party Sub-Processors

We use the following sub-processors to provide fraud detection services. All data transfers are encrypted.

5. How We Use Information

We use collected information exclusively for:

• Analyzing orders for fraud indicators specific to YOUR store
• Detecting patterns of fraudulent behavior
• Providing fraud risk assessments and alerts
• Complying with legal obligations under Shopify DPA

6. Data Retention

We retain data only as necessary for fraud prevention:

• Fraud Analysis Logs: 90 days - for pattern analysis and chargeback disputes
• Merchant Sessions: Active while app is installed
• Cached API Data: 24-72 hours for performance
• All Data: Permanently deleted upon app uninstallation

7. Data Security

We implement industry-standard security measures:

• TLS encryption for all data transmissions
• Encrypted database storage at rest
• Strict access controls
• Regular security assessments

8. Data Subject Rights (GDPR/CCPA)

Under data protection laws, individuals have rights to access, correct, delete, and restrict processing of their data.

8.1 How to Exercise Rights

For Store Customers: Submit data requests directly to the merchant (store owner). As the Data Controller under Shopify's DPA, merchants are responsible for fulfilling these requests.

For Merchants: Contact us at support21@peoples-shield.com for assistance with data requests. We will respond within 30 days.

9. International Data Transfers

Data may be transferred to and processed in the United States. We ensure appropriate safeguards including Standard Contractual Clauses with sub-processors.

10. Changes to This Policy

We may update this policy and will notify you by:

• Posting updates on this page
• Updating the "Last Updated" date

11. Contact Information

For questions about this Privacy Policy:

• Email: support21@peoples-shield.com
• Address: PeoplesShield, P.O. Box 703, Kalkaska, Michigan 49646, United States

12. Merchant Responsibilities

By installing PeoplesShield, you agree to:

• Provide appropriate privacy notices to your customers about fraud detection
• Obtain necessary consents for data processing where required by law
• Use the app in compliance with all applicable privacy laws

PeoplesShield - Fraud Protection for Shopify and WooCommerce Merchants