Terms of Service

Last updated: November 11, 2026

These Terms of Service (“Terms”) govern your use of Brickmoat, a Shopify application that helps merchants reduce fake signups, fake orders, and risky visitors. By installing or using Brickmoat you agree to these Terms and to our Privacy Policy.

1. The service

Brickmoat scores customers and orders for bot/fraud risk, can apply merchant-configured actions (tags, holds, optional Pro cancel/delete), supports block/allow lists, and runs cleanup scans with CSV backup. Through a theme app embed it applies the storefront visitor rules you set (IP, country, region, city, network, user-agent, referrer, page, VPN / proxy / Tor) with a block, redirect or allow outcome, and keeps a 30-day visitor log. Through a Shopify Checkout validation Function it can refuse checkout for entries on your blocklist. On plans that include them, it can send events to Shopify Flow and to a webhook address you provide. Features depend on the plan you select. Watch mode scores without changing your store for an initial period.

Brickmoat fails open where possible: if our storefront checks or an IP lookup are unreachable, shoppers can still browse and buy. Scoring that runs after Shopify records a signup or order may still apply once we receive the webhook.

2. Your responsibilities

• You must have authority to install apps on the Shopify store.
• You are responsible for how you configure auto-actions (including cancel/delete) and for reviewing flagged customers and orders.
• You remain responsible for your store’s compliance with consumer, privacy, and marketing laws, and for informing your customers about apps you use when required.
• You are responsible for the webhook address you enter and for the service that receives those events, and for keeping any visitor-log or review exports you download secure.
• Do not misuse the app to harass people, evade the law, or process data unrelated to store protection.

3. Geo-blocking, visitor rules and checkout blocking

Brickmoat is a traffic and fraud tool. It is not a legal-compliance, sanctions-screening or age-verification product, and you must not rely on it as one. You decide which countries, regions, networks, visitors and buyers to block, redirect or refuse, and you are responsible for making sure those choices are lawful where you sell, including consumer-protection, anti-discrimination and geo-blocking rules.

• IP-based location and VPN / proxy / Tor detection come from a third-party service, are approximate, and can be wrong or bypassed.
• Verified search and social crawlers are let through your visitor rules. We verify them by network, but we do not guarantee how any search engine or platform indexes or ranks your store.
• The checkout blocklist is a Shopify Function that compares what a buyer enters against your lists. No Brickmoat script runs in checkout and the Function cannot see IP addresses.
• Content protection only discourages right-click and text selection. It is not DRM and does not prevent copying.
• Bots that post directly to Shopify’s endpoints bypass the storefront shield and are handled after the fact by webhook scoring. Brickmoat does not block all bots.

4. Plans and billing

Free and paid plans are described on the app’s pricing page and in the Shopify admin. Paid plans bill through Shopify Billing (including any trial shown at checkout). Fees are non-refundable except where Shopify’s billing rules or applicable law require otherwise. We may change pricing with notice via the listing or in-app messaging; continued use after the change constitutes acceptance for future billing cycles.

5. Data and privacy

We process personal data as described in the Privacy Policy. You grant us permission to access the Shopify data scopes you approve so we can provide the service. You must not send us sensitive data the app is not designed to handle (for example payment card PANs).

If you use storefront visitor rules, Brickmoat keeps a visitor log for 30 days (full IP address only for visitors who were blocked or redirected, truncated for those allowed), and a copy of your blocklist is stored in an app-owned shop metafield inside Shopify for the checkout Function. The Privacy Policy lists what is stored and which processors are involved. Where the law requires it, telling your visitors about this processing in your own privacy notice is your responsibility.

6. Accuracy disclaimer

Risk scores are probabilistic. Brickmoat may miss some bots or flag some legitimate customers, and a visitor rule may stop a real shopper or let an unwanted one through. Always review high-impact actions. We do not guarantee that your store will be free of fraud, chargebacks, or spam.

7. Availability

We aim for reliable uptime but do not warrant uninterrupted service. Maintenance, provider outages, or Shopify API limits may delay scoring or actions.

8. Intellectual property

Brickmoat’s software, branding, and documentation remain ours (or our licensors’). You receive a limited, non-exclusive right to use the app on stores you control while installed and in good standing.

9. Suspension and termination

You may uninstall at any time. We may suspend or terminate access for abuse, non-payment, or material breach. After uninstall, Shopify’s shop/redact flow and our retention rules govern deletion of your data.

10. Limitation of liability

To the fullest extent permitted by law, Brickmoat and its operators are not liable for indirect, incidental, special, consequential, or lost-profit damages, or for losses arising from missed or incorrect risk decisions, blocked or redirected visitors, refused checkouts, Shopify outages, or merchant configuration choices. Our total liability for any claim relating to the service is limited to the fees you paid us for Brickmoat in the three months before the claim (or USD $0 on the free plan).

11. Indemnity

You will defend and indemnify us against claims arising from your store’s use of Brickmoat, your settings (including destructive auto-actions and the visitors, regions or buyers you choose to block), or your violation of these Terms or law.

12. Changes

We may update these Terms. The “Last updated” date will change when we do. Continued use after an update means you accept the revised Terms.

13. Shopify

Brickmoat is an independent app made by a Shopify Partner. Shopify is a trademark of Shopify Inc. Your use of Shopify itself is governed by your own agreement with Shopify.

14. Contact

Questions: qaisarmughal69@gmail.com
Site: https://brickmoat.com