Last updated 19 October 2026
Quote Desk: B2B Quotes is operated by Understory. It lets Shopify merchants collect quote requests from their product pages, price and revise quotations, share them with buyers for acceptance, and turn accepted quotes into Shopify draft orders. This policy explains what the app touches and why.
When a buyer sends a quote request, the form collects their name, business email, company, the products and quantities they want, an optional message and the answers to any questions the merchant added. If the buyer is signed in to the store, Shopify also tells us their customer ID. We use this only to show the request to the merchant and to prepare the quotation.
The app reads products and variants (names, SKUs and prices) to price quotes, and creates and reads draft orders when a merchant turns an accepted quote into a checkout. It reads the order a draft becomes, so the merchant can see a quote was paid. It reads the store name and currency for the quotation.
For each quote we save the buyer details above, every revision the merchant saves (products, quantities, prices, totals Shopify calculated, notes and validity date), an activity log of who sent, accepted or changed it and when, and the link to its draft order. For the store we save its settings, its plan and an expiring access token. Buyer review links are stored only as a one-way hash.
Plans are handled by Shopify. The app reads which plan is active and counts quotes sent each month. We never see payment details.
Cloudflare hosts the app, stores the data above, renders PDFs and receives Shopify's privacy notifications. We do not sell merchant or buyer information, and we do not use it for advertising or marketing email.
Quotes are kept while the app is installed, because they are part of the merchant's sales records. On uninstall the access token is deleted at once. When Shopify asks us to erase a store's data, 48 hours after uninstall, every quote, revision and setting is deleted. When Shopify asks us to erase a buyer's data, their name, email, company, message and answers are removed from their quotes and their review link stops working; products, amounts and quote numbers stay so the merchant's records still add up. Rate limit records of storefront requests are deleted after one hour.
To access, correct or delete information, or with any question about this policy, contact us below. Depending on where you live, you may have additional rights, including the right to complain to your local data protection authority.
If this policy changes, we will post the update here with a new date. For privacy questions or requests, email support@understoryapps.com.