Privacy Policy

Last Updated: February 21, 2026

Introduction

This Privacy Policy describes how Recommendo ("we," "our," or "us") collects, uses, and protects information when you use our Shopify app. We are committed to protecting your privacy and ensuring transparency about our data practices.

Information We Collect

Merchant Information

When you install our app, we collect the following information:

  • Shop domain and Shopify store information
  • Access tokens required for app functionality
  • App settings and configuration preferences
  • Subscription plan and usage data

Product Information

We access and store product data from your Shopify store to provide recommendation services:

  • Product IDs, titles, descriptions, and images
  • Product prices and variants
  • Product tags, collections, and categories
  • Product performance metrics

Customer Information

We collect limited customer information necessary for app functionality:

  • Session data (user ID, email, name) for authentication purposes
  • Customer interaction data (impressions, clicks, purchases) for analytics
  • Device type and location context (homepage, product page, cart, checkout)

Analytics Data

We collect analytics data to improve our services:

  • Recommendation impressions and click-through rates
  • Add-to-cart and purchase events
  • Revenue and conversion metrics
  • Product performance data

How We Use Your Information

  • To provide and maintain our upsell recommendation services
  • To personalize product recommendations based on your store's data
  • To analyze app performance and improve our services
  • To process transactions and manage subscriptions
  • To send important updates about the app (if you've opted in)
  • To comply with legal obligations and Shopify's requirements

Data Storage and Security

We take data security seriously and implement appropriate measures to protect your information:

  • Data is stored securely using industry-standard encryption
  • Access tokens are encrypted and stored securely
  • We use secure database systems (MongoDB and PostgreSQL) with proper access controls
  • Regular security audits and updates are performed
  • Data is isolated per merchant to ensure privacy

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

  • Shopify: As required by Shopify's Partner Program and API terms
  • Service Providers: With trusted third-party services that help us operate our app (e.g., hosting providers, analytics services)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

Your Rights and Choices

You have the following rights regarding your data:

  • Access: Request access to your personal data stored by our app
  • Deletion: Request deletion of your data (subject to legal and operational requirements)
  • Correction: Update or correct inaccurate information
  • Data Portability: Request a copy of your data in a portable format
  • Uninstall: Uninstall the app at any time, which will trigger data deletion procedures

To exercise these rights, please contact us using the information provided below or submit a data request through Shopify's compliance webhooks.

Shopify Compliance

Our app complies with Shopify's Partner Program requirements and data protection standards:

  • We handle customer data requests through Shopify's compliance webhooks
  • We respect customer privacy rights and GDPR requirements
  • We only collect data necessary for app functionality
  • We provide transparent information about data collection and usage

Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

  • Active merchant data is retained while your app is installed
  • Upon app uninstallation, we initiate data deletion procedures
  • Some data may be retained for legal or operational purposes (e.g., transaction records)
  • Analytics data may be anonymized and retained for service improvement

Cookies and Tracking Technologies

Our app uses session cookies and tracking technologies necessary for app functionality. We do not use third-party advertising cookies or tracking pixels. All tracking is limited to app functionality and analytics.

Children's Privacy

Our app is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on this page
  • Updating the "Last Updated" date
  • Sending a notification through the app (for significant changes)

Your continued use of the app after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: crystaltechnology6@gmail.com

App Developer: crystal-technology

For data requests related to Shopify compliance, you can also use Shopify's built-in compliance tools available in your Shopify admin.

Additional Resources