Terms of service
Plain terms for a small product. Installing Doorman means accepting them.
Last updated 2 August 2026.
1. Who you are contracting with
Style Beauty LLC, Cheyenne, Wyoming, United States, trading as NovaStack. Contact support@novastack.co.
2. What the service is
Doorman evaluates storefront visitors against rules you write, and, on the Pro plan, checks the network behind each order and writes a verdict onto it. You keep control of every rule. We execute what you configure and nothing else.
3. What it cannot do, stated up front
These limits are real, and you should know them before you pay rather than after:
- No app can intercept a payment attempt at Shopify's checkout. Doorman cannot stop card-testing floods. It reduces fake orders and blocks browsing; it does not sit between a card and a processor.
- Blocked traffic still appears in Shopify's own analytics. Shopify counts the pageview before our code runs. Our figures are ours; theirs are theirs.
- A public product feed stays public. Endpoints Shopify serves directly cannot be closed by an app.
If any claim you have read about Doorman contradicts this section, this section is correct and we want to know where you read the other thing.
4. Plans and payment
Plans and prices are shown in the app and charged by Shopify on your Shopify invoice. We never see or hold your card. Trials, upgrades, downgrades and cancellation are handled through Shopify's billing, and cancelling means uninstalling the app.
A downgrade takes effect on the next plan check rather than instantly, and features above your new plan stop applying at that point.
5. Acceptable use
You may not use Doorman to break the law where you or your customers are, to discriminate on a basis your law protects, or to conceal a store's identity from a regulator. You are responsible for the rules you write and for their effect on the people they turn away.
6. Availability
We aim for continuous service and do not promise it. Edge decisions are designed to fail open, so a fault on our side lets visitors through rather than locking your store. The checkout-side guard is configured to fail closed by design; see the app for its current status.
7. Your data
You own your store's data. What we process, and for how long, is set out in the privacy policy, which forms part of these terms. Section 12 below is our data processing agreement.
8. Intellectual property
The app, its code and its brand remain ours. Your rules, block-page text and settings remain yours.
9. Warranty
Doorman is provided as it is. We do not warrant that it will catch every fraudulent order or block every unwanted visitor. Fraud detection is a judgement about probability, and this product is built to tell you when it does not know rather than to guess.
10. Liability
To the extent the law allows, our total liability for any claim is limited to the amount you paid us for the service in the twelve months before the claim. We are not liable for lost profits or lost sales, including a sale lost to a rule that turned away a real customer. Simulation mode exists so you can check a rule before it does that.
11. Ending it
Uninstall at any time. On uninstall we delete your data as described in the privacy policy. We may suspend an account that breaches section 5, and will say why.
12. Data processing agreement
Where we process personal data on your behalf, you are the controller and we are the processor, and the following applies:
- Instructions. We process only to provide the service and only as your configuration instructs, plus where a law we are subject to requires otherwise, in which case we tell you unless that law forbids it.
- Subject matter and duration. The subject matter is access control and order risk assessment; the duration is the life of your install.
- Categories. Storefront visitors and the buyers who place orders. Data: connection data as listed in the privacy policy, plus order identifiers, shipping country and payment type. No special categories.
- Confidentiality. Anyone with access is bound to confidentiality.
- Sub-processors. The current list is in the privacy policy. We give notice before adding one, and you may object by uninstalling.
- Assistance. We help you answer data subject requests and, where it applies to your use, a data protection impact assessment.
- Breach. We notify you without undue delay and in any case within 72 hours of becoming aware. See the security policy.
- Deletion. On termination we delete, as described in the privacy policy. We do not keep a copy for our own purposes.
- Audit. On reasonable request we provide the information needed to demonstrate compliance.
13. Changes
We may update these terms and will announce a material change in the app before it takes effect. Continuing to use Doorman after that is acceptance.
14. Governing law
The laws of the State of Wyoming, United States, without regard to conflict of law rules. Nothing here removes a consumer or data protection right you hold under the law of the place you live.