UA Checkout privacy policy

Version dated 15 October 2026

This translation is provided for convenience. The Ukrainian version is legally binding.

UA Checkout is a checkout service for online stores on Shopify. The service is provided by sole proprietor (FOP) Ihor Hrzheliak (hereinafter “we”). This policy explains what data we process, why, and how we protect it.

1. Whose data and in what role

• Merchants (store owners and their employees): we are the controller of the dashboard account data.
• Store buyers: the data that a buyer enters on the checkout page is processed by us on behalf of and on the instructions of the store. The controller of this data is the store where the buyer places the order.

2. What data we process

• Dashboard account: name, email, password hash; when logging in with Google or Apple — the account identifier, email and name provided by the provider; when signing in with Telegram — your Telegram identifier, name and username, and your phone number if you shared it (this chat with the bot becomes the channel for alerts and support).
• Store data: Shopify store address, settings, integration keys (stored only in encrypted form).
• Buyer order data: name, phone, email (optional), city and delivery branch, order contents and total, comment.
• Technical data: IP address, browser type, advertising campaign parameters (UTM, click identifiers) — for abuse protection and for store reports.

We do not receive or store payment card data: payment takes place on the page of the store's payment provider.

3. Purpose of processing

• Placing the order, passing it to Shopify, payment and delivery.
• Issuing fiscal receipts if the store has connected a fiscal receipt (PRRO) service.
• One Viber or SMS reminder about an unfinished order — only if the buyer ticked this in the checkout and the store turned reminders on. The store's SMS service (TurboSMS or AlphaSMS) sends it; the box can be unticked until the checkout is finished.
• Store analytics and advertising — only through tools that the store itself has connected (Meta, Google, TikTok, Microsoft Clarity, etc.).
• Operation of the dashboard, security, user support.

4. Who the data is shared with

With the store where the order was placed and with the services that this store has connected: Shopify, payment providers (for example, monobank, LiqPay), delivery services (Nova Poshta), fiscal receipt (PRRO) services (Checkbox, Vchasno.Kasa), advertising and analytics systems. We do not sell personal data.

Support on Telegram (@uacheckout_bot): messages from dashboard users are first answered by an AI assistant. To prepare the answer, the message, the conversation of the last 7 days and the state of the account in the service (plan, store settings, connected services without keys, latest dashboard notifications) are sent to Anthropic (the Claude model) through its API. Keys, passwords, card numbers, phone numbers and e-mails are hidden in the text before it is sent; the AI assistant receives no buyer data. The conversation is kept for up to 180 days. If you need a person, write “human”: our team answers.

5. Analytics on ua-checkout.com

On ua-checkout.com and on the dashboard's login and sign-up pages we use Google Analytics 4 (Google) and Microsoft Clarity (Microsoft) to understand where visitors come from, what interests them and how many of them sign up. These services receive pseudonymous visit data without a name or email: pages, clicks, scrolling, device type and approximate location, and they store identifiers in your browser's cookies. Clarity records actions on ua-checkout.com, on the sign-in and sign-up pages and in the store connection wizard (form field contents are hidden); these services do not track the rest of the dashboard or the checkout pages.

In addition, ua-checkout.com counts visits with its own counter on our servers: the page, the site you came from (its address only, without the path), campaign tags (utm), the browser language, the screen width and the time zone (from which we infer the country). The counter sets no cookie and stores no IP address: to count a visitor once a day we keep an irreversible hash of the address and browser with a key that changes daily, so visits on different days are not linked. These records are kept for up to 400 days. The site also remembers for 30 days, in the “uac_src” cookie, where you first came from (campaign tags, the referring site and the first page); if you sign up, this source is saved on the account so that we understand which channels bring customers.

To help with setting things up, the dashboard records on our servers which pages you open, which buttons and links you press (their names only) and errors that occur during actions. What you type into fields, service keys and buyers' data are not recorded. Only the UA Checkout team sees these records; they are kept for up to 180 days and are not shared with third parties.

You can opt out using the “Opt out of analytics” link at the bottom of ua-checkout.com: after that, neither Google Analytics, Clarity nor our counter runs on the site or the sign-up pages, and the “uac_src” cookie is not set.

6. Storage and protection

Data is stored on servers in the EU. Integration secrets are encrypted (AES-256-GCM); access to the dashboard is protected by a password or by logging in with Google/Apple. Incomplete checkouts are kept for up to 90 days; order data is kept for as long as the store needs it and the law requires.

7. Your rights

You can access your data, correct or delete it, and withdraw your consent to mailings. Buyers should contact the store where the order was placed; we help the store to fulfil the request. Contact: allidevelop@gmail.com.

8. Changes

We may update this policy; the date of the version is shown at the top of the page.