Privacy policy

Loyalty Connector is a loyalty program app for Shopify stores, operated by CodeAPIness, Albania ("we", "us"). This policy explains what data the app processes, why, where, and for how long. Questions: [email protected].

1. Roles

• Merchants (stores that install the app): we are the controller of the account and billing data described in section 2.
• Customers of a store: the merchant is the controller. We process their data on the merchant's behalf, only to run the merchant's loyalty program (section 3).

2. Data about merchants

• Store name, .myshopify.com domain, store currency and the app version installed.
• The Shopify access token that lets the app work in your store, stored encrypted.
• Subscription status and plan, as reported by Shopify. We never see card or bank details; Shopify handles payment.
• If you register or contact us outside Shopify: your name, email address and message, and the IP address and browser of the registration form (to prevent abuse).
• Support chat conversations, linked to your store domain.
• Audit records of changes to your program settings (what changed, when, and by which staff account ID).

3. Data about a store's customers

Processed on the merchant's behalf, from Shopify webhooks and from what the customer enters in the store's loyalty widgets:

• Shopify customer ID, a referral code, and whether the customer accepted marketing emails (for newsletter points).
• Order ID and number, currency, totals and line items (product and variant IDs, quantities, prices), and order status (paid, fulfilled, cancelled, refunded).
• The points ledger: points earned, redeemed and expired, discount codes created, referrals between customer IDs.
• Birth date, only if the customer enters it to receive a birthday reward.
• Product reviews: the public name the customer chooses, rating, title, text and optional photo link. Approved reviews are published in the store.
• Reward requests (e.g. "I followed you on Instagram"): a link, note or screenshot. These are deleted as soon as the merchant approves or rejects the request.
• Store networks: when one merchant runs several stores with shared points and the customer links their accounts, we keep which customer IDs (one per store) belong together. Linking uses a one-time code the customer enters themselves; we store only a hash of it, for 15 minutes. No email or other contact data is used to match accounts.

We do not process customers' email addresses, phone numbers, postal addresses, payment details or IP addresses. Our app requests Shopify's protected customer data at Level 1 only.

4. Why we process data

• To provide the app: calculate, store and display points, create discount codes, and show balances in the store (performance of the contract with the merchant).
• To bill and manage subscriptions, and to keep accounting records (contract and legal obligation).
• To provide support and keep the service secure and working (legitimate interest).

We do not sell data, do not use it for advertising, and do not combine data from different stores.

5. In the shopper's browser

When a customer opens a store link with a referral code (?ref=), the store's theme saves that code in the browser's local storage (loy_ref) for 30 days and adds it to the cart, so the referral is credited when they order. The app's storefront widgets set no cookies and use no analytics or tracking.

This website sets no cookies and has no analytics. Its fonts are served from our own server, not from third parties.

6. Service providers

Customer data from stores (section 3) is stored only on our servers in Finland and in the merchant's own Shopify store.

7. How long we keep data

• While the app is installed, program data is kept so that points and history stay correct.
• When the app is uninstalled, the program pauses and the data is kept, so a reinstall continues where it stopped. About 48 hours after uninstalling, Shopify sends a data-removal request (shop/redact). We then delete all of the store's program data, including customer data, and the access token.
• Merchant account, licence and billing records, and the audit log, are kept as business records for as long as accounting and legal obligations require.
• Reward request proofs are deleted when the request is decided.

8. Customer privacy requests

Shopify forwards customer requests to the app automatically:

• Data request: the merchant is notified in the app and can export everything we hold about that customer.
• Erasure request (customers/redact): the customer ID is replaced with a pseudonym everywhere. Birth date, review names and texts, and request proofs are removed, including the reviews published in the store. Point totals stay as anonymous accounting entries. In a store network, a request from one store removes that store's customer ID and its link; the customer's accounts in the merchant's other stores are not affected.

Customers can also contact the store directly. Merchants can contact us at [email protected].

9. Security

All traffic uses HTTPS. Access tokens and API keys are stored encrypted. Each store's data sits in its own database schema. Only authorised staff with role-based access can see store data, and their actions are logged.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to complain to a data protection authority. In Albania that is the Information and Data Protection Commissioner (IDP). If you are a store's customer, please contact the store first. They are in charge of your data.

11. Changes

We will update this page when the app's data use changes and change the date at the top. For significant changes we will notify merchants in the app or by email.

Contact

CodeAPIness, Albania · [email protected]