Privacy Policy

Offer Stack ("the App") provides offer negotiation and wishlist tools ("the Service") to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

We take data privacy seriously and aim to meet the requirements of the world's major data protection regulations, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable frameworks. By installing Offer Stack, you agree to this Privacy Policy and our Terms of Service.

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account:

• Read products, variants, and collections — we use this to display product information in the offer modal and wishlist
• Read and create draft orders — we use this to create discounted orders when offers are accepted
• Read orders — we use this to track whether accepted offers are completed
• Read customer information — we use this to associate offers and wishlists with the correct customer

We also store your shop domain, notification email, and encrypted authentication credentials in order to maintain your connection to Shopify and deliver the Service.

Additionally, we collect the following types of personal information from your customers once you have installed the App:

• Email address — used to send offer notifications and identify returning customers. Customer emails are encrypted at rest in our database.
• Marketing consent — we record whether a customer has opted in or out of marketing communications, and when that preference was last updated.
• Wishlist and offer activity — including which products a customer has wishlisted, offers they have submitted, and their responses to merchant offers.

What We Do NOT Collect

We do not collect or store customer names, phone numbers, physical or shipping addresses, payment information, or any government-issued identification. The App is designed to operate with minimal personal data.

How We Use Your Personal Information

We use the personal information we collect from you and your customers in order to provide the Service and operate the App. Specifically:

Shop data is used to connect securely with your Shopify store, save your app configuration and offer rules, and send you notifications about new offers and app updates.

Customer data is used to send offer-related email notifications, manage wishlist items, maintain offer history, and respect each customer's marketing consent preferences. We only contact customers in relation to offers they have submitted or that you have sent to them.

Analytics data is used to generate offer performance reports within your dashboard, track conversion metrics, and improve the overall functionality of the App. Analytics are aggregated at the store level and are not shared externally.

Sharing Your Personal Information

Some of the personal data collected is shared with third-party service providers that are necessary to deliver the Service:

• Shopify — As a Shopify app, we interact with Shopify's platform to read product data, create draft orders, and manage customer information. All data shared with Shopify is subject to Shopify's Privacy Policy.
• Sendgrid — We use Sendgrid to send transactional emails such as offer notifications and acceptance confirmations. Customer email addresses are shared with Sendgrid only for the purpose of delivering these messages.

We do not sell customer data, share data for advertising purposes, or transfer personal information to any unauthorized third parties. Personal information may be shared if required to comply with applicable laws, respond to lawful requests, or protect our rights.

How We Keep Your Personal Information Secure

We take the security of your personal information seriously. Customer email addresses and authentication credentials are encrypted in our database. All data is transmitted over HTTPS, and our database and backups are encrypted at rest. Data is stored on secure, US-based cloud infrastructure.

Access to personal information is limited to only those systems and personnel that need it to provide the Service. Each shop's data is isolated, authentication is required for all access, and data access is logged for audit purposes.

Your Rights

As a merchant, you can view all collected data in your app dashboard, request a full export of your store's data, control which features are enabled, and delete all data by uninstalling the App.

If you are a resident of the European Union, the United Kingdom, or California, you have additional rights under GDPR, the UK Data Protection Act, or the CCPA, including the right to access, correct, or delete your personal information. To exercise these rights, please contact us using the information below.

Customer data rights are managed through your Shopify store. Customers can request their data or its deletion via Shopify's built-in privacy tools, and we process these requests automatically. When a customer requests deletion, we remove all of their data and anonymize any associated offer records.

As a merchant using Offer Stack, you are responsible for informing your customers about data collection, obtaining proper consent for marketing emails, maintaining a privacy policy that covers third-party apps, and forwarding any customer data requests through Shopify.

Data Retention

We only retain personal data for as long as necessary to fulfill the purposes for which it was collected. Converted offers are retained for up to two years. Expired or declined offers and customer wishlists are retained for up to one year. Customer records are kept until deleted or until the shop uninstalls.

We run automated cleanup processes on a weekly basis to remove data that exceeds these retention periods. When you uninstall Offer Stack, your data remains accessible if you reinstall within 48 hours. After that, Shopify notifies us to permanently delete all of your shop's data, including all customer data, offers, and configurations.

Children's Privacy

Offer Stack is not intended for use by children under 13. We do not knowingly collect personal information from children.

Changes

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of significant changes through your app dashboard and by email to your registered notification address.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a data request, please contact us by email at support@offerstackapp.com.

You can also submit data requests through Shopify's built-in GDPR tools using your shop domain.