Privacy Policy

This privacy policy applies to all apps published by Alberuni Azad on the Shopify App Store.

What data we collect

When you install one of our apps, we collect and store your shop domain (e.g. yourstore.myshopify.com), data you create inside the app such as scripts, settings, or configurations, and a session token issued by Shopify to authenticate your admin session.

We also collect limited product-usage data about how you interact with the app's admin interface, such as which pages you open, actions you take (for example creating a snippet or changing your plan), and your plan tier. This usage data is tied to your shop domain only and never contains your customers' personal information.

We do not collect your customers' personal data. We do not collect payment information.

Our apps do not collect any data about your storefront visitors. Some of our apps let you add your own custom scripts to your storefront; you are responsible for any data those scripts collect and for disclosing it in your own store's privacy policy.

Why we collect it

We use this data to provide the app's functionality and to understand and improve how the app is used. Your shop domain is used to associate your data with your store in a multi-tenant environment. The usage data described above is used only for our own product analytics, to see which features merchants use and where the app can be improved. We do not use your data for advertising, and we do not sell it.

Our legal basis for processing this data is the performance of our contract with you (providing the app you installed) and our legitimate interest in operating and securing the service.

How we store it

Your data is stored on secured servers hosted on Railway (railway.app). Data is encrypted in transit (HTTPS) and isolated per shop. We do not sell your data or share it with third parties for their own purposes.

Third-party services

Our apps use the Shopify Admin API to read store data needed for the app to work, such as your products, collections, and pages. Data you access through Shopify is also governed by Shopify's Privacy Policy in addition to this policy.

We use Railway (railway.app) as our hosting and database sub-processor to store your data on our behalf.

We use Mixpanel (mixpanel.com) as our product-analytics sub-processor. We send Mixpanel your shop domain and the usage events described above so we can measure how the app is used and improve it. We do not send Mixpanel your customers' data or any payment information. Data sent to Mixpanel is governed by Mixpanel's Privacy Policy in addition to this policy. When your shop's data is deleted, we also request deletion of the corresponding data held by Mixpanel.

International data transfers

Our servers are located in the United States. If you are located in the European Economic Area or the United Kingdom, your data is transferred to and processed in the United States. Where required, these transfers are protected by Standard Contractual Clauses or an equivalent safeguard.

Data retention and deletion

When you uninstall an app, all data associated with your shop is permanently deleted from our servers within 48 hours. You may also request deletion at any time by contacting us at the email below.

GDPR

If you are located in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, contact us at alberuni.work@gmail.com.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data properly.

We respond to all Shopify GDPR webhook requests (customer data request, customer data erasure, and shop data erasure) as required by Shopify's Partner Program requirements.

Cookies

Our embedded admin interface uses cookies and similar storage only to keep you securely signed in to your Shopify session while you use the app. We do not use cookies for advertising or tracking.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision.

Contact

Alberuni Azad
alberuni.work@gmail.com
helloalberuni.com