Privacy Policy

Overview

Collection-Based Discounts ("the App", "we", "us") is a Shopify application that enables merchants to configure automatic cross-collection discount rules applied at checkout via Shopify Functions. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

Data We Collect

When you install and use the App, we collect:

• Shop information: Your Shopify store domain and shop name, used to identify your account within the App.
• Authentication tokens: OAuth access tokens issued by Shopify that allow the App to read your products and write discounts on your behalf.
• Account details: Store owner first name, last name, and email address, collected after authentication to associate your account.
• Discount configurations: Collection IDs, discount percentages, and discount titles that you create within the App.

We do not collect customer personal data, order details, payment information, or any data beyond what is listed above.

How We Use Your Data

• To authenticate your Shopify store and maintain your session.
• To create, update, and manage discount rules in your Shopify store via the Admin API.
• To apply your configured discount logic at checkout via Shopify Functions.
• To display your existing discount configurations within the App dashboard.

We do not sell, rent, or share your data with any third parties for marketing purposes.

Data Storage and Security

Your data is stored in a managed PostgreSQL database (Prisma Postgres) hosted on infrastructure provided by Prisma Data, Inc. The database is accessible only through authenticated connections and is not publicly accessible.

Access tokens stored in our database are used solely to make Shopify API calls on your behalf. We do not log or expose these tokens in any user-facing interface.

Shopify API Access

The App requests the following Shopify API access scopes:

• read_products: To allow you to select collections when configuring discount rules.
• write_discounts: To create and manage automatic discounts in your Shopify store.

Data Retention

Your session and discount configuration data is retained for as long as the App is installed on your store. When you uninstall the App, we process the app/uninstalled webhook and delete all session data associated with your store within 48 hours.

Your Rights

You have the right to:

• Request a copy of the data we hold about your store.
• Request deletion of your data at any time by uninstalling the App or contacting us directly.
• Request correction of any inaccurate data.

GDPR Compliance

We comply with Shopify's GDPR webhook requirements. We respond to the following mandatory webhooks:

• customers/redact: We do not store customer personal data, so no action is required beyond acknowledgement.
• customers/data_request: We do not store customer personal data. No customer data is held by the App.
• shop/redact: We delete all merchant data associated with the shop within 48 hours of receiving this request.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated date. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: