VIPriority
Privacy policy
Last updated 5 October 2026
1. Who we are
VIPriority ("VIPriority", "we", "us") is a Shopify app operated by MindLab Future. It helps Shopify merchants recognize VIP customers by their spend, hold items with a reservation fee, send customer emails, and issue authenticity certificates for the items they sell.
For personal data about a merchant's customers, the merchant is the controller and VIPriority acts as a processor on the merchant's behalf. Questions about this policy can be sent to support@mindlabfuture-ai.com.
2. Data we collect from merchants
When a merchant installs VIPriority we store:
- The store's myshopify domain and the access token Shopify issues to the app.
- The name and email of the staff member who opens the app, as provided by Shopify when they sign in.
- App settings: VIP threshold, counting rules, VIP tag and collections, reservation rules, email settings and templates, and certificate settings.
- The merchant's own Resend API key and sender details, if they turn on emails. The API key is stored encrypted and used only to send that merchant's emails.
3. Data we process about the merchant's customers
- VIP spend. For each order: order ID and number, customer ID, order date, the amount counted toward VIP spend and, if it was not counted, why. For each customer: total counted spend, VIP status, and the dates VIP status started and ends.
- Reservations. The reservation fee order, the reserved item, price, fee, status, expiry date and the balance invoice link.
- Emails. Customer first name and email address, read from Shopify when an email is sent, and a log of each email: type, subject, status and the values used to fill the template.
- Certificates. For each certified item: serial number, order, product details and image, the owner's name and email, and the history of ownership transfers, including the name and email of each person a certificate is transferred to. We also count how many times each certificate's QR page is opened. We do not record the IP address or device of the person scanning.
A certificate's public QR page shows the item, its serial and whether the certificate is valid. It shows the owner's first name and last initial (for example, "Andrea V.") unless the merchant chooses to show full names.
4. Shopify permissions and why we need them
| Permission | Why VIPriority needs it |
|---|---|
read_orders, read_fulfillments | Count each customer's spend from paid orders, minus refunds and cancellations, and spot reservation fee orders. |
read_customers, write_customers | Read the customer's name and email for emails and certificates, and save VIP status as a customer tag and app fields on the customer. |
read_products, write_products, write_publications | Show product details on certificates, and create the reservation fee product. |
read_validations, write_validations | Keep VIP-only products from being bought by non-VIP customers at checkout. |
read_draft_orders, write_draft_orders | Create the balance invoice a customer pays to complete a reservation. |
Customer contact details are used only for the emails the merchant turns on and for certificates. VIPriority does not send its own marketing to customers.
5. Where data is stored
App data is stored in a database hosted by Railway in the United States (US West). All traffic between Shopify, VIPriority, our database and Resend is encrypted in transit.
6. How we use data
We use the data above only to run VIPriority for the merchant: to calculate VIP status, apply VIP tags and collection access, manage reservations, send the emails the merchant has turned on, issue, verify and transfer certificates, and provide support when the merchant asks for it. MindLab Future staff can technically access this data, but we only look at it to provide support or keep the service running. We do not sell personal data, use it for advertising, or share it with anyone other than the subprocessors below.
7. Subprocessors
| Subprocessor | Purpose |
|---|---|
| Shopify | Commerce platform, orders, customers, checkout and app billing |
| Railway | Application hosting and database |
| Resend | Sending customer emails, through the merchant's own Resend account, only when the merchant turns emails on |
If we add a subprocessor, we will update this list before it receives any data.
8. Retention and deletion
- Records are kept while VIPriority is installed, so VIP status, reservations and certificates stay accurate over time.
- When Shopify sends a
customers/redactrequest, we delete that customer's spend records, VIP status, reservations and email log. Certificates for items they bought stay valid, but their name, email and customer link are removed from them. - When a merchant uninstalls VIPriority, Shopify sends a
shop/redactrequest 48 hours later and we delete all of that store's data, including settings, certificates and sessions. - When Shopify sends a
customers/data_request, the merchant can see what we hold for that customer on the customer's VIP page in the app, and we help them respond.
9. Your rights
If you are a customer of a store that uses VIPriority, please contact that store first: they control your data and can ask us to access, correct or delete it. You can also write to us at support@mindlabfuture-ai.com and we will pass your request to the store. Merchants can contact us directly at the same address.
10. Early access form on this website
If you request early access on this website, we receive your name, email, store website, what you sell, your Shopify plan and any note you add. The form is handled by Netlify, which hosts this website. We use these details only to reply to you about VIPriority, and you can ask us to delete them at any time.
11. Changes
We will update the date at the top of this page when this policy changes, and tell merchants about significant changes in the app or by email.