Privacy Policy
How 1Case handles data
Effective date: October 17, 2026
This Privacy Policy explains how 1Case, a Commerce7 app made by 7Labs ("the App", "we", "us"), handles data when a winery installs and uses it.
1. What the App does
The App calculates shipping prices for a winery's Commerce7 checkout. At the shipping step, Commerce7 sends the App the cart, and the App answers with the shipping methods and prices the winery set up. The App can also save a ship date on the cart when a winery holds shipping, check orders against the prices it quoted, and, when the winery asks, copy its prices into the winery's Commerce7 shipping settings.
2. Our role
For personal information about a winery's customers, we act as the winery's service provider (under the CCPA and similar US state laws) and processor (under the GDPR, where it applies). The winery decides how its checkout works and is responsible for its own privacy notices. Our commitments as a service provider are in our Terms of Service.
3. Data the App handles
| Data | Where it comes from | How long it's kept |
|---|---|---|
| Shipping settings: zones, methods, prices, ship-date holds, product type rules | Entered by the winery, or imported from its Commerce7 shipping settings | Until the winery deletes or changes them, or asks us to delete them. Kept after uninstall so a reinstall restores them. |
| A copy of the winery's original Commerce7 shipping settings | Commerce7, when the winery imports or copies prices | Same as the shipping settings |
| Install record: the winery's Commerce7 store ID and install and uninstall dates | Commerce7 | Same as the shipping settings |
| Checkout carts: items, weights, prices, club details, and the customer's name and shipping address | Commerce7, at the shipping step | Used to work out the price and the ship date, then discarded. Not stored. |
| Quote record: the cart's Commerce7 ID, the time, and how many methods were offered | The App | Server memory only, up to 7 days |
| Order details: Commerce7 order ID and number, ship-to state, shipping method and price, hold name and ship date | Commerce7 order notifications | Only for orders charged the winery's backup rates or placed under a shipping hold, up to the most recent 50 and 200. Until the winery marks them done or uninstalls the App. |
| Recorded checkout requests, including customer names and shipping addresses | Commerce7, only while the winery switches on Record incoming carts | Server memory only, the last 5 per winery. Deleted when the winery switches recording off, when the server restarts, or on uninstall. |
| Winery staff sign-in | Commerce7 | Commerce7 confirms the person is a user of the winery's account. A sign-in token valid for one hour is kept in the open browser page. |
| Activity log: the staff member's email address (or Commerce7 user ID), their IP address, what they did (signing in, changing a setting, viewing order or checkout details), when, and whether it worked. Installs and uninstalls are logged too. | The App | 13 months, then deleted automatically. Kept for those 13 months after an uninstall too, as a security record. |
| Server logs: store ID, order numbers, error messages | The App | Kept by our hosting provider for a limited period, for troubleshooting and security |
The App never receives payment card details.
4. How we use data
Only to run the App for the winery: pricing shipping, saving ship dates, checking orders, showing the App's screens, giving support and keeping the App secure. We do not sell or share this data, use it for advertising, or combine one winery's data with another's.
To decide whether to show the winery an offer for 1Pixel, our other Commerce7 app, the App reads the winery's website address from Commerce7 and checks with 1Pixel whether the winery already uses it. No customer data is involved.
5. Who receives data
- Fly.io, Inc., which runs the App's servers in the United States.
- Tigris Data, Inc., which stores the App's settings, order lists and activity log, working with Fly.io.
- Commerce7, which sends the App its data, receives the shipping prices and ship dates, and handles billing.
6. Security
- Data travels over HTTPS and is stored encrypted at rest.
- Each winery's settings and order lists are separate. The App's screens are available only to people signed in to that winery's Commerce7 account, and only after Commerce7 confirms the App is installed there.
- Order notifications from Commerce7 are accepted only with the App's password.
- If we become aware of a security incident affecting a winery's data, we tell that winery and Commerce7 without undue delay.
7. Retention and deletion
When a winery uninstalls the App, we delete its order lists, quote records and recorded checkout requests straight away. The App also keeps a daily backup of every winery's settings and order lists for 30 days, so copies in those backups expire within 30 days.
The winery's shipping settings stay so that reinstalling doesn't reset its prices. To have them deleted, email 7labs@dmitru.com from an address connected to the winery and we delete them, including backup copies, within 30 days.
8. Requests from customers
The winery handles requests from its own customers (for example, to access or delete their data). We help wineries respond to them. If a customer contacts us directly, we pass the request to the winery. Because the App doesn't store customer names, emails or addresses, there is usually nothing of theirs to delete.
9. Children's privacy
The App is a business tool for wineries. It is not directed at children, and wine sales are limited to adults of legal drinking age.
10. Changes to this policy
We will tell wineries about material changes by email or in the App before they take effect, and update the effective date above.
11. Contact
Questions about this Privacy Policy or your data: 7labs@dmitru.com.