Quantity Breaks Privacy Policy

When you install the App, we are automatically able to access certain types of information from your Shopify account:

• Your store name and .myshopify.com domain, and the access token Shopify issues at install. The token is what allows the App to create and update discounts on your behalf.
• Products, variants and collections you select when configuring an offer, so the offer can target them.
• The offers you configure, together with your store’s timezone and currency, so scheduled offers start at the right local hour.

The App also measures how each offer performs on your storefront. This is the only processing linked to a shopper, and it is deliberately narrow:

• It runs only with consent. The storefront script checks Shopify’s Customer Privacy API first. If analytics processing is not allowed — or the API is unavailable, or the answer has not resolved — nothing is sent at all.
• The identifier is random and re-salted daily. The browser generates a token with no personal meaning, which we hash with your store domain and the calendar date (SHA-256, truncated) before storing. Because the salt changes daily, stored rows cannot be linked across days into a profile of one shopper.
• Nothing identifying is stored. No IP address, user agent, cookie contents, customer ID, name, email, address or payment details.

The App does not store your customers’ personal information and does not read your customer list.

We use the information we collect to:

• Operate the App and display your offers on your storefront.
• Create and maintain the corresponding discounts in your Shopify admin through Shopify’s APIs.
• Show you view, add-to-cart and revenue figures for each offer.
• Keep the Service secure and working — verifying request signatures, rate limiting, and diagnosing errors.
• Communicate with you, including about support requests.

We do not sell personal information, share it for advertising, use it to build profiles, or use it to train machine learning models.

We share data only with the service providers needed to run the App:

• Shopify — the platform the App runs on and reads from.
• A managed database provider, which stores your offers, settings and analytics.
• A cloud hosting provider, which runs the App server.

Your data is stored on servers in Germany and in the United States. A current list of the service providers we use is available on request, and we give notice before adding or replacing one. Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

• Hashed visitor rows are deleted automatically after 30 days.
• Order de-duplication records are deleted automatically after 90 days.
• Daily totals, which contain no identifiers, are kept while the App is installed.
• Your offers, settings and access token are deleted within 48 hours of uninstall, when Shopify sends the shop redaction request. Uninstalling ends the App’s access to your store immediately.

All traffic is served over HTTPS and the database connection requires TLS. Data is encrypted at rest by our database provider. Webhooks and storefront requests from Shopify are verified by signature before being processed, and production access is limited to those who operate the App.

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Requests from a shopper should be directed to the merchant whose store they visited, as the controller of that data. We support Shopify’s mandatory privacy webhooks: for customer data requests and customer redaction we hold no data keyed to a customer, so there is nothing to return or erase; for shop redaction, every record we hold for that store is deleted.

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. Material changes will be notified through the App or by email before they take effect.

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at devangfour@gmail.com.