Privacy Policy

This Privacy Policy explains how MerchTools("we", "us") handles information across our website at merchtools.net and the Shopify apps we publish. We aim to collect as little as possible and to use it only to provide our apps and services.

Who we are

MerchTools is an independent developer of Shopify apps and Shopify development services. You can reach us at hello@merchtools.net for any privacy question or request.

Information we collect

From our website. The site is largely static. We do not use advertising or cross-site tracking cookies. Our hosting provider may process basic, non-identifying request logs (such as IP address and user agent) to serve pages and protect against abuse.

From merchants who install our apps. When you install an app on your Shopify store, we process what is needed to operate it, which may include:

• your store's myshopify domain and the access token that authorizes the app;
• app configuration and settings you enter (e.g. discount rules, margin floors, coupon settings);
• order and product identifiers required by a feature (e.g. an order ID to issue one coupon per order, or product/variant IDs and prices for a quote or discount).

Limited personal data. Some features process a small amount of personal data that a buyer voluntarily submits — for example, the name and email address entered on a request-a-quote form — solely to deliver the requested feature. Where a feature does not need customer personal data, our apps are designed not to request it from Shopify.

How we use information

• to provide, operate and secure the apps and their features;
• to respond to support requests you send us;
• to comply with legal obligations and Shopify's platform requirements.

We do not sell personal data, and we do not use it for advertising.

Sharing

We share information only with service providers that make the apps work — primarily Shopify (the platform your store runs on) and our infrastructure/hosting providers — and only as needed to deliver the service, or where required by law.

Data protection & GDPR

Our apps implement Shopify's mandatory compliance webhooks. When Shopify notifies us of a customer data request or erasure, or of a shop uninstalling and requesting redaction, we respond by returning or deleting the relevant data we hold:

• customers/data_request — we provide the customer-related data we store, if any;
• customers/redact — we delete the customer-related data we store;
• shop/redact — we delete the store's data after uninstall.

Retention

We keep app data for as long as the app is installed and needed to provide the feature. When you uninstall, or upon a valid redaction request, we delete the associated data. You may also ask us to delete data at any time by emailing us.

Security

Data is transmitted over encrypted connections (HTTPS/TLS) and stored with access controls. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect the information we hold.

Your rights

Depending on your location, you may have the right to access, correct or delete personal data we hold about you, and to object to or restrict certain processing. To exercise these rights, contact hello@merchtools.net.

Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions or requests: hello@merchtools.net.