Introduction
This Privacy Policy describes how Recommendo ("we," "our," or "us") collects, uses, and protects information when you use our Shopify app. We are committed to protecting your privacy and ensuring transparency about our data practices.
Information We Collect
Merchant Information
When you install our app, we collect the following information:
- Shop domain and Shopify store information
- Access tokens required for app functionality
- App settings and configuration preferences
- Subscription plan and usage data
Product Information
We access and store product data from your Shopify store to provide recommendation services:
- Product IDs, titles, descriptions, and images
- Product prices and variants
- Product tags, collections, and categories
- Product performance metrics
Customer Information
We collect limited customer information necessary for app functionality:
- Session data (user ID, email, name) for authentication purposes
- Customer interaction data (impressions, clicks, purchases) for analytics
- Device type and location context (homepage, product page, cart, checkout)
Analytics Data
We collect analytics data to improve our services:
- Recommendation impressions and click-through rates
- Add-to-cart and purchase events
- Revenue and conversion metrics
- Product performance data
How We Use Your Information
- To provide and maintain our upsell recommendation services
- To personalize product recommendations based on your store's data
- To analyze app performance and improve our services
- To process transactions and manage subscriptions
- To send important updates about the app (if you've opted in)
- To comply with legal obligations and Shopify's requirements
Data Storage and Security
We take data security seriously and implement appropriate measures to protect your information:
- Data is stored securely using industry-standard encryption
- Access tokens are encrypted and stored securely
- We use secure database systems (MongoDB and PostgreSQL) with proper access controls
- Regular security audits and updates are performed
- Data is isolated per merchant to ensure privacy
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- Shopify: As required by Shopify's Partner Program and API terms
- Service Providers: With trusted third-party services that help us operate our app (e.g., hosting providers, analytics services)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
Your Rights and Choices
You have the following rights regarding your data:
- Access: Request access to your personal data stored by our app
- Deletion: Request deletion of your data (subject to legal and operational requirements)
- Correction: Update or correct inaccurate information
- Data Portability: Request a copy of your data in a portable format
- Uninstall: Uninstall the app at any time, which will trigger data deletion procedures
To exercise these rights, please contact us using the information provided below or submit a data request through Shopify's compliance webhooks.
Shopify Compliance
Our app complies with Shopify's Partner Program requirements and data protection standards:
- We handle customer data requests through Shopify's compliance webhooks
- We respect customer privacy rights and GDPR requirements
- We only collect data necessary for app functionality
- We provide transparent information about data collection and usage
Data Retention
We retain your data for as long as necessary to provide our services and comply with legal obligations:
- Active merchant data is retained while your app is installed
- Upon app uninstallation, we initiate data deletion procedures
- Some data may be retained for legal or operational purposes (e.g., transaction records)
- Analytics data may be anonymized and retained for service improvement
Cookies and Tracking Technologies
Our app uses session cookies and tracking technologies necessary for app functionality. We do not use third-party advertising cookies or tracking pixels. All tracking is limited to app functionality and analytics.
Children's Privacy
Our app is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending a notification through the app (for significant changes)
Your continued use of the app after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
For data requests related to Shopify compliance, you can also use Shopify's built-in compliance tools available in your Shopify admin.