How we handle your data.

Information we collect

We only collect what we need to operate the app inside your store and to provide responsive support.

• Shop data supplied by Shopify, including store name, email, and plan tier granted through app scopes.
• Usage data about how you configure and interact with app features inside Shopify Admin.
• Support context that you choose to share when you contact us for help or strategy guidance.

How we use information

We process store and personal information exclusively to deliver, maintain, and improve the products you subscribe to.

• Provide core functionality, personalise settings, and ensure the app runs reliably for your store.
• Monitor performance, resolve incidents, and debug product issues reported by merchants or our monitoring.
• Share service updates, security notifications, and critical account information related to your subscription.
• Deliver support and professional services you request, including scheduled consultations.

Sharing and disclosure

We never sell merchant or customer data. We share information only with service providers that help us deliver our apps and who are bound by strict confidentiality.

• Infrastructure, analytics, and payment partners that process information on our behalf.
• Professional advisors such as legal, compliance, or accounting partners where required.
• Shopify, when necessary to meet Shopify App Partner requirements or resolve account concerns.

We may disclose data if required to comply with applicable law, enforce agreements, or protect the rights and safety of our users.

Shopify permissions

During installation you will see the precise Shopify scopes requested. We only request scopes required for the features you activate, and you can review active permissions in Shopify Admin at any time.

Data retention

We retain merchant data while your subscription remains active. When you uninstall or request deletion we delete or anonymise store data within 30 days unless a longer retention period is legally required.

Security

We employ technical and organisational safeguards such as encryption in transit, role-based access controls, minimum-privilege policies, and routine security reviews to protect the data entrusted to us.

International transfers

We may process data in the United Kingdom, European Union, and United States. When information moves across regions we rely on contractual clauses or other recognised safeguards consistent with applicable privacy laws.

Your rights

Depending on your location you may have rights to access, correct, delete, or restrict processing of your personal data. Contact us and we will respond within the timelines mandated by law.

Policy updates

We will update this policy to reflect changes in our practices or legal obligations. When a material change occurs we notify merchants via email or in-app messaging and update the effective date below.