Custom Product Messages Privacy Policy

Custom Product Messages (“the App”) provides custom product message creation and display (“the Service”) to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account through Shopify’s APIs:

• read_products: This API scope allows the App to access and read details about the products, variants, and collections in your store. This is required to match and display the appropriate custom messages on the storefront based on specific product SKUs.

Additionally, after you install the App, we collect the following types of information about you and others who may access the App on behalf of your store:

• Store information: your store name, permanent domain, and contact email.
• App usage and configuration data: app installation status, app settings and configurations (including custom product messages, color choices, and language settings that you create), and technical information about how you interact with the App.

We do not collect, store, or log any personal information from your store’s customers or buyers (for example, their names, email addresses, IP addresses, or order information). Any technical data that we collect (such as IP address or browser information) relates only to merchants or staff using the App’s admin interface, not to your storefront customers.

We collect personal information directly from you, through your Shopify account, and by using the following technologies:

• “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. We use cookies in the App’s admin interface to maintain your session and keep you authenticated while you use the App.
• “Log files” track actions occurring within the App’s admin interface and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps. These logs are used for security, debugging, and performance monitoring.
• “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse or interact with the App’s admin interface.

We do not use cookies, pixels, or other tracking technologies on your storefront or on your store customers’ devices through this App.

How Do We Use Your Personal Information?

We use the personal information that we collect from you in order to provide the Service and operate the App. Specifically, we use this information to:

• Authenticate you and allow you to access and configure the App.
• Retrieve and match your products (using the read_products scope) so that the configured custom messages can be generated and displayed on your storefront.
• Communicate with you, including sending important notices about the App or responding to your inquiries.
• Optimize, maintain, and improve the App, including monitoring performance and troubleshooting issues.
• Provide technical or customer support related to your use of the App.

We do not use your personal information or your customers’ data for advertising or marketing unrelated to the App, and we do not sell or rent personal information to third parties.

Sharing Your Personal Information

We do not share your personal information or your customers’ data with third parties, except in the following limited circumstances:

• To comply with applicable laws and regulations.
• To respond to a subpoena, search warrant, court order, or other lawful request for information we receive.
• To protect our rights, property, or safety, or the rights, property, or safety of others.

If we use service providers (for example, hosting or infrastructure providers), they will only process personal information on our behalf and under appropriate data protection safeguards.

Your Rights

Depending on where you are located, you may have certain rights with respect to your personal information, including the right to request access to, correction of, or deletion of the personal information that we hold about you.

If you are a European resident (including residents of the European Economic Area and the United Kingdom), you have rights under applicable data protection laws, including:

• The right to access personal information we hold about you.
• The right to ask that your personal information be corrected, updated, or deleted.
• The right to object to or restrict certain processing of your personal information.

If you would like to exercise these rights, please contact us using the contact information below. Regardless of your location, you can contact us with any requests or questions about your personal information, and we will respond in accordance with applicable law.

Additionally, if you are a European resident, we note that we process your information in order to fulfill contracts we might have with you (for example, when you install and use the App) or otherwise to pursue our legitimate business interests described above. Please note that your information will be transferred outside of Europe, including to Canada and the United States.

Data Retention

When you install the App, we maintain your store settings, custom product messages, and related configuration and session details for as long as you use the App or until you ask us to delete this information.

When you uninstall the App, all associated store configurations, custom messages, and related records are deleted from our database automatically within a reasonable time period, except where we are required to retain certain information for legal, accounting, or compliance purposes.

We also delete or anonymize your personal information if we receive a valid data deletion request from you, or via Shopify’s mandatory data protection webhooks (for example, in connection with GDPR/CPRA requests), subject to any legal obligations that require us to retain certain data.

Cross-Border Transfers

We may store and process your personal information in Canada, the United States, and other countries outside of your country of residence. These countries may have different data protection laws than those in your jurisdiction. Where required by law, we take steps to ensure that appropriate safeguards are in place to protect your personal information when it is transferred internationally.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices, changes to the App, or for other operational, legal, or regulatory reasons. We will indicate the date of the latest revision at the top of this policy, and, where required by law, we will provide additional notice of material changes.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint or exercise your privacy rights, please contact us by e-mail at: [email protected] or by mail using the details provided below: