1. Data We Collect

• Store Data: Shopify shop domain and access tokens necessary to authenticate and operate the app.
• File Attachments: Files uploaded directly to our servers via Supabase storage (Pro plan) or linked through your Shopify Files CDN.
• Customer & Analytics Data: When a shopper interacts with or downloads an attachment, we may process technical session identifiers (such as cart_token), anonymized Shopify customer IDs (if the customer is logged in), and conversion timestamps. We do not collect names, payment card details, or physical addresses.

2. How We Use Data We use the collected information solely to:

• Display file download blocks and attachments on your storefront.
• Enforce access rules (such as login requirements or customer tag gating).
• Provide merchants with download analytics, session drop-off insights, and conversion impact metrics.

3. Data Storage, Third Parties & Retention

• Storage Providers: Data and self-hosted files are stored securely using Supabase. Files linked via your Shopify library are served directly from Shopify’s global CDN.
• Data Retention & Privacy Compliance: In compliance with GDPR and Shopify API terms, customer identifiers are retained only as long as necessary for analytics and are immediately anonymized upon receiving a customers/redact request. Download counts are preserved in an anonymized format.
• Uninstallations: If you uninstall the application, your store records, access tokens, and server-hosted files will be deleted in accordance with the mandatory shop/redact protocol.

4. Customer Rights (GDPR / CCPA) Shoppers wishing to inspect or request the deletion of data linked to their store activity should contact the respective store merchant directly, who can process customer privacy requests via Shopify.

5. Contact Us If you have questions about this Privacy Policy or data handling practices, please contact our support team: [email protected]