Privacy Policy

Last updated: June 6, 2026

Perk ("we", "us") is a Shopify app that lets merchants create and manage discount campaigns and a storefront discount widget. This policy explains what data the app processes and how it is handled. We apply the same privacy rights to all personal data regardless of where an individual is located.

Data we process

Merchant account data. When you install the app, Shopify provides session details for the staff member who authenticates: name, email address, user ID, locale, the OAuth access and refresh tokens, and the permission scopes you granted. We use this solely to operate the embedded app and to make authenticated Shopify Admin API requests on your behalf.

Store data. We store your shop domain, your plan, your campaign configuration (names, discount settings, targeting rules, widget design), and aggregate performance counters (widget views and coupon clips as store-level daily totals).

Order data. When an order uses one of your campaign codes, Shopify notifies us and we record the order ID, the order total, the campaign it redeemed, and the time. We use this solely to show you redemption and sales performance and to enforce campaign and plan redemption limits. We do not receive or store customer names, email addresses, shipping addresses, or payment details.

Storefront shoppers. The widget records a view or a discount clip only as an aggregate daily count against a campaign; it does not store IP addresses or any shopper contact details.

Personalized codes. If you turn on a unique code per customer, we store the issued code alongside an identifier for the shopper who claimed it, so the same shopper always gets the same code. For a signed-in shopper that identifier is their Shopify customer ID. For a guest it is a random value the widget generates and keeps in the shopper's browser, which is not linked to any other identity. We also record the shopper's Shopify customer ID against a redemption where Shopify supplies one.

How we use data

Data is used only to provide the app's functionality: authenticating with Shopify, creating and managing discounts, rendering the storefront widget, and showing campaign performance. We do not sell personal data or use it for advertising.

Service providers

We rely on Shopify (platform and APIs), Fly.io (application hosting), and a PostgreSQL database to store the data described above. Email to store owners is delivered by Resend. Application errors are reported to Sentry with the shop domain and the operation that failed, never with shopper records. If you use the in-app support chat, the conversation and your shop domain are processed by Crisp, our chat provider. Data is transmitted over HTTPS.

Data retention and deletion

Redemption records and activity logs are retained for a maximum of 12 months and then deleted automatically. Email bodies are cleared after 90 days. When you uninstall the app, your store's data is deleted. We also honour Shopify's mandatory privacy webhooks. When a customer requests their data, we collect what we hold for that shopper and send it to your store's contact address, because you are the controller of it. When a customer requests erasure, the redemption records for their orders, any personalized codes issued to them, and their customer ID on remaining records are deleted. When a store is deleted, all of its data (campaigns, redemption records, analytics, personalized codes, and account data) is removed. Erasure and store deletion are applied when the webhook is received, within 48 hours at the latest.

Your rights

You may request access to, correction of, deletion of, or export of the personal data we hold, and you may withdraw consent by uninstalling the app. To make a request, contact us at the address below.

Contact

Questions or privacy requests: support@useperk.app.