1. Personal Information the App Collects
When you install the App, we are automatically able to access certain types of information from your Shopify account strictly necessary to operate the application:
- Store Information: We collect details such as your shop domain, primary email address, timezone, and installed themes to configure your app settings appropriately.
- Customer Information: To process storefront functionality and analytics, we temporarily access anonymized session states, order IDs, and basic product parameters. We do not explicitly store PII (Personally Identifiable Information) such as customer names, physical addresses, or credit card numbers.
We collect personal information directly from the relevant individual, through your Shopify account, or using technical data files. "Cookies" are data files placed on your device to include an anonymous unique identifier. "Log files" track actions occurring on the Site to help us resolve engineering bugs before they affect your live store.
2. How Do We Use Your Personal Information?
We use the personal information we collect from you and your customers primarily to provide and operate the Service. Specifically:
- To render dynamic functionality directly on your storefront.
- To communicate with you regarding billing, support updates, and new feature announcements.
- To aggressively monitor internal metrics in order to analyze our customers' experience and optimize the App.
3. Sharing Your Personal Information
Your data is never sold to third parties. We share your Information strictly to help us provide our service, for example, securely storing your configuration rules in our database provider infrastructure, or with analytics providers to help us improve the experience. Finally, we may also share your Information to comply with applicable laws and regulations, or to respond to lawful requests for information we receive.
4. Shopify Mandatory Webhooks & GDPR
As a verified Shopify App, we fully comply with all mandatory data handling requests:
Customers Data Request
If a customer requests their data through Shopify, we explicitly outline what anonymized data we have interacted with. Since we do not explicitly store customer PII natively, we rarely have overlapping data for this request.
Customers Redact
Upon receiving a customer redaction payload from Shopify, any trace analytics associated with that customer's session are permanently destroyed from our systems within 48 hours.
Shop Redact
When you uninstall our App, Shopify triggers a Shop Redact request. Within 48 hours, all store configurations, statistical data, and associated merchant accounts are wiped permanently from our databases.
5. Data Retention
When you install the App and utilize the Service, we will maintain the necessary architectural and statistical information required to render the application for our records, unless and until you ask us or Shopify to delete this information.
6. Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
7. Contact Us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at orbitryteam@gmail.com.