1. Introduction
This Privacy Policy describes how our Shopify application ("the App", "we", "us") collects, uses, stores, and protects your data. By installing and using the App, you consent to the practices described in this policy.
2. Data We Collect
The App collects the following data from your Shopify store via the Shopify Admin API:
- Shop details — shop domain, shop name, and currency settings.
- Product information — titles, descriptions, variants, pricing, and images.
- Collection information — titles, handles, and product associations.
- Order data — checkout sessions and order attributes used for abandoned cart recovery.
- OAuth access token — encrypted and stored solely to authenticate API requests on your behalf.
3. Purpose of Data Collection
The collected data is used exclusively for the following purposes:
- Injecting and rendering custom personalization fields on your storefront product pages.
- Managing product personalization options, pricing, and conditional logic.
- Tracking checkout sessions and recovering abandoned carts.
- Providing analytics and insights within the App's admin dashboard.
4. Data Storage & Security
All data is stored in encrypted databases. Shopify OAuth access tokens are encrypted using AES-GCM-256 encryption and are only decrypted server-side when making API requests on your behalf. Data is isolated per shop domain using Row-Level Security (RLS), ensuring one store cannot access another store's data.
5. GDPR Compliance
We fully comply with the General Data Protection Regulation (GDPR). Upon request, or when you uninstall the App, we will:
- Permanently delete all shop-scoped data (custom fields, styling, configurations, and analytics).
- Process customer data redaction requests within 30 days via the Shopify GDPR webhook endpoints.
- Provide a data export of your personalization configurations upon request.
To exercise your right to erasure or data portability, contact us through the Shopify App Store support channel.
6. No Sale or Sharing of Data
We do not sell, rent, or share your data with any third party. Your data is used exclusively to provide the App's functionality. We do not use your data for advertising or marketing purposes.
7. Data Retention
Data is retained for the duration of your App subscription. Upon uninstallation, all shop-scoped data is permanently purged within 48 hours via theapp/uninstalledwebhook. Audit logs of the deletion are retained for compliance purposes.
8. Your Rights
Under GDPR and similar regulations, you have the right to:
- Access — request a copy of your personal data.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your personal data.
- Restriction — request limitation of data processing.
- Portability — receive your data in a structured, machine-readable format.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the Shopify App Store or within the App dashboard. Continued use of the App after changes constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions or data requests, please contact us through the Shopify App Store support channel.