Terms of service
Last updated 1 October 2026
These terms are an agreement between the merchant who installs Rallybox (“you”) and Kazunari Itagaki, trading as Plain Lab (“we”, “us”). By installing or using Rallybox you agree to them. If you use Rallybox for a business, you confirm you may accept these terms for that business.
1. The service
Rallybox is a Shopify app that lets you sell products together as sets, offer quantity discounts, and see the orders and revenue that came through them. It runs inside your Shopify admin and on your storefront through a theme app block. It is available only to Shopify merchants and only through the Shopify App Store.
2. Plans and billing
Rallybox has a free plan and a paid plan, listed on the Plans page inside the app and on the App Store listing. The free plan includes your first 10 orders that use a set or one of your offers; other orders are not counted. The free allowance is given once per store and does not reset if you uninstall and reinstall the app. When your store reaches 10 such orders, everything keeps working for 24 hours, after which your sets and offers pause on your storefront until you choose the paid plan. The paid plan is billed by Shopify, on your Shopify invoice, in US dollars, every 30 days until you cancel. You can change or cancel a plan at any time from the Plans page; uninstalling the app cancels it. Charges already made are not refunded, except where the law requires it. We will give at least 30 days’ notice, through the app or by email, before raising the price of a plan you are on.
3. Your responsibilities
You are responsible for the prices, discounts and products you set up in Rallybox, for checking that a set or discount works as you intend before offering it, and for your store’s compliance with the laws that apply to you, including consumer, tax and privacy law. You must not use Rallybox to break the law or Shopify’s terms.
4. Data processing
This section is our data processing agreement with you. For personal data about your customers, you are the controller and we are your processor: we process it only on your instructions, which are these terms and your use of the app.
Data we process. Your store’s domain and the access token Shopify issues to the app; the sets, offers and settings you create; and, for each order that went through a set or an offer, Shopify’s order id and order number, the subtotal in your store’s currency, the currency, the order’s time, and which set, offer or A/B group it belongs to. We do not store your customers’ names, email addresses, phone numbers, postal addresses, customer ids, IP addresses or payment details. When you run an A/B test, your storefront may keep two cookies holding only a random group letter; they are set only for shoppers who have allowed analytics through your store’s cookie consent.
Purpose. Only to provide Rallybox to you: to show and price your sets and offers, and to show you the orders, revenue and average order value that came through them. We do not sell or share this data, and we do not use it for advertising, profiling, or for any other merchant.
Retention. We keep it for as long as Rallybox is installed on your store.
Deletion. When you uninstall, the access token is deleted immediately, and Shopify’s shop/redact request, sent 48 hours later, deletes everything else we hold for your store. You can also ask us to delete it at any time by emailing support@rallybox.app from an address on your store’s account; we do so within 30 days. Requests from your customers reach us through Shopify (customers/data_request, customers/redact) and are answered as our privacy policy describes.
Subprocessors. We use these providers to run Rallybox:
| Provider | What it does | Where |
|---|---|---|
| Vercel Inc. | Hosts the app | United States |
| Supabase Inc. | Stores the app’s database | United States (AWS us-east-1) |
| Shopify | The platform the app runs on; bills paid plans | As set by Shopify |
We will list any new subprocessor on this page at least 30 days before it starts processing your data; if you object, you may uninstall.
Security. Data is encrypted in transit (TLS) and at rest. Access is limited to what is needed to run and support the app.
Breaches. If we become aware of a breach affecting your data, we will tell you without undue delay and within 72 hours, with what we know and what we are doing about it.
Transfers. Your data is processed in the United States. Where the law requires a transfer mechanism, the European Commission’s Standard Contractual Clauses (processor module) are incorporated into these terms by reference.
Our privacy policy describes the same data in more detail.
5. Availability and changes
We work to keep Rallybox running but do not promise it will be uninterrupted or error-free. We may change or improve features. If we stop offering Rallybox, we will give at least 30 days’ notice.
6. Disclaimer and limitation of liability
Rallybox is provided “as is”. To the extent the law allows, we disclaim all implied warranties, and our total liability to you for any claim about Rallybox is limited to the amount you paid us for it in the 12 months before the claim. We are not liable for lost profits or indirect damages. Nothing here limits liability that cannot be limited by law.
7. Ending
You can stop at any time by uninstalling Rallybox. We may suspend or end your use if you break these terms, with notice where practical. Section 4’s deletion rules apply when your use ends.
8. Changes to these terms
If we change these terms, we will update the date at the top and tell installed merchants through the app or by email at least 30 days before a material change takes effect.
9. Law
These terms are governed by the laws of Japan, and disputes go to the Osaka District Court as the court of first instance with exclusive jurisdiction.
10. Contact
Kazunari Itagaki, trading as Plain Lab · support@rallybox.app