Privacy policy

Information we collect

• Store information: your Shopify store domain, store name, currency, plan, and the access scopes you approve during installation.
• Customer information: for customers you enroll in a program, we store the Shopify customer ID, name, email address, enrollment dates, program assignment, overrides, and accumulated discount and spend totals.
• Order information: for paid orders that used a program discount, we store the order ID, order total, discount amount applied, and timestamps so cycle balances and dashboard metrics stay accurate.
• Usage information: basic logs of app actions (program created, enrollment paused, CSV imported) and technical logs needed to diagnose errors.

How we use information

• To determine discount eligibility at checkout and apply order discounts through Shopify's discount functionality.
• To calculate remaining cycle spend, discount balances, enrollment validity, and lifetime discount totals.
• To display dashboard insights such as attributed sales, discount investment, and program health warnings.
• To provide support, prevent abuse, and comply with legal obligations.

How we share information

• We do not sell personal information and we do not use it for advertising.
• We share data only with infrastructure providers required to operate the app (hosting, database, and error monitoring), each bound by confidentiality and data-protection obligations.
• We share data with Shopify as required to run the app and apply discounts to your store's checkout.
• We may disclose information where legally required, or to protect the rights and safety of merchants and their customers.

Data retention and deletion

• We retain program, enrollment and order data while the app is installed so balances and reporting remain accurate.
• When you uninstall the app, we retain your data for a limited grace period so reinstalling restores your programs, then delete it.
• We honour Shopify's mandatory data privacy webhooks: customer data requests, customer redaction, and shop redaction.
• You can request deletion of your store's data at any time by contacting us.

Security

• Data is transmitted over TLS and stored on managed infrastructure with access limited to authorised personnel.
• Access tokens are stored encrypted and used only to perform the actions you authorised during installation.

Your rights

• Depending on your location, you or your customers may have rights to access, correct, export, or delete personal information.
• Merchants can raise requests on behalf of their customers; we respond within the timeframes required by applicable law.

Changes to this policy

• We may update this policy as the app evolves. Material changes will be reflected by the updated date below, and where appropriate, communicated in the app.

Contact

Questions about this policy or a data request? Email admin@tooezweb.com.