Privacy Policy

1. Who is the data controller

The App is provided by 67.644.899 JOAO PAULO ALVES, CNPJ 67.644.899/0001-56, with address at Av. Rio Grande do Sul, 387, Vila Barbosa, Terra Rica/PR, CEP 87.890-000, Brazil. For any privacy-related request, contact us at jls.mkt25@gmail.com.

2. Information we store

Store / merchant data. We store your store domain (your-store.myshopify.com) and the offline access token issued by Shopify for your store (the session), which is required for the App to create and update discounts on your behalf.

Promotions. The configuration of each promotion you create: name, discount type (percentage, fixed amount, free shipping or Buy X Get Y), value, method (automatic or code), the target products or collections as Shopify GIDs, the recurrence and time range (for example “22:00–23:59”), the IANA time zone, validity dates, and active/paused status.

Promotion runs. A record of each occurrence: the computed start and end instants, the identifier of the Shopify discount created for it, and the result of the last synchronization (including any error message returned by Shopify).

Storefront display settings. Which surfaces are enabled per promotion (announcement bar, popup, product page section, floating button), plus the text, colors and icon you configured for them, and the global appearance of the floating button.

Store settings. Your store’s time zone as reported by Shopify, and the interface language you selected in the App admin panel.

3. Information we do NOT collect

We do not collect any personal data about your store’s buyers or end customers. The storefront blocks only render the promotion text and a countdown; they do not set advertising or identification cookies and do not capture buyer name, e-mail, address or payment data.

We do not process your orders, your checkout or any payment. The discount is applied by Shopify itself.

Icons you upload for the storefront blocks are stored in Shopify Files and served by Shopify’s CDN — they are not stored on our server.

4. Permissions (scopes)

The App requests read_products (to let you pick the products and collections a promotion applies to), read_discounts and write_discounts (to create, update and remove the scheduled discounts, which is the core function of the App), and write_files (to upload to Shopify Files the icon you choose for the storefront blocks).

The App does not request access to orders, customers or payment data.

5. How we use the information

To operate the App: authenticate with Shopify, read the products and collections you select, and create, update and remove the discounts that correspond to your schedule.

To keep your schedule running: a background process checks, about once a minute, whether an occurrence has ended, and rolls the discount window forward to the next one.

To render the storefront: serve the promotion text and countdown to your storefront through Shopify’s App Proxy.

To remember your preferences: such as the admin panel language and the storefront appearance you configured.

6. Hosting and sub-processors

The App is hosted on our own server (VPS) with a local database (SQLite). We integrate with Shopify’s APIs. We do not use third-party analytics providers and we do not sell or share your data with advertisers.

Data is transmitted over encrypted connections (HTTPS). Webhooks received from Shopify are verified by HMAC signature, and App Proxy requests are verified by the signature Shopify appends to them.

7. Data retention and deletion

Your data exists for as long as the App is installed. When you uninstall the App, Shopify sends the shop/redact webhook (approximately 48 hours after uninstall), and we delete all data associated with your store.

We also respond to Shopify’s mandatory compliance webhooks: customers/data_request (we hold no customer data to return), customers/redact (we hold no customer data to erase), and shop/redact (we erase all store data).

Discounts created by the App live in your own Shopify admin. Uninstalling the App does not delete them automatically — you can review and remove them under Discounts at any time.

8. Your rights (GDPR / LGPD)

Depending on your jurisdiction, you may have the right to access, correct or delete your data, among others. You can exercise deletion by uninstalling the App and/or by contacting us at jls.mkt25@gmail.com.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page.

10. Contact

For any question about this Policy, contact us at jls.mkt25@gmail.com.