Privacy Policy

1 Introduction

TwigPixel ("we," "us," or "our") respects your privacy and is committed to protecting the personal data and merchant information handled through our Shopify applications and services.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Shopify apps or engage our development services. By using our applications, you agree to the practices described in this policy.

If you have questions or concerns about this policy or our data practices, please contact us at hello@twigpixel.com.

2 Information We Collect

Depending on the specific Shopify app or service, we may collect and process the following categories of information:

• Identity information: Name, email address, and account credentials
• Shopify store information: Store URL, plan details, and merchant account data
• Product data: Product listings, variants, pricing, and inventory levels
• Order data: Order details, transaction records, and fulfillment status
• Customer data: Customer names, email addresses, and shipping information required for app functionality
• Technical data: IP addresses, browser type, device information, and usage logs
• Communication data: Messages and correspondence you send us

We collect only the data necessary to provide the specific functionality of each application. Data collection is always proportionate to the service being delivered.

3 Shopify API Usage

Our applications use the Shopify Admin API, Storefront API, and related Shopify platform APIs exclusively for the approved functionality described at the time of app installation.

Specifically:

• API access is scoped to only the permissions required for each application's stated purpose
• We do not use Shopify API access to collect data beyond what is needed for app functionality
• We do not sell, rent, or share Shopify merchant or customer data with third parties for marketing purposes
• API tokens and credentials are stored securely and are never exposed in client-side code
• We comply with Shopify's Partner Program Agreement and API Terms of Service

4 Data Security

We implement industry-standard security measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

• HTTPS encryption: All data transmission between our systems and your browser or Shopify store is encrypted using TLS/SSL
• Secure servers: Data is stored on servers with restricted physical and network access, firewall protection, and regular security audits
• Restricted access: Only authorized personnel with a legitimate need have access to merchant and customer data
• Regular updates: Our infrastructure and dependencies are regularly updated to address security vulnerabilities

While we implement strong security measures, no system is completely immune to security risks. We encourage merchants to use strong passwords and report any suspicious activity immediately.

5 Third-Party Services

Our applications may interact with the following categories of third-party services to deliver core functionality:

• Shopify APIs: Core platform APIs used to power app functionality within the Shopify ecosystem
• Hosting providers: Cloud infrastructure providers (such as AWS, Google Cloud, or similar) that host our application servers and databases
• Analytics tools: Tools used to monitor app performance, track errors, and improve reliability
• Email service providers: Services used to send transactional notifications where applicable

All third-party service providers are selected based on their compliance with applicable data protection laws and their ability to maintain appropriate security standards. We do not sell your data to third parties.

6 Cookies & Analytics

Our website and embedded Shopify apps may use cookies and similar tracking technologies for the following purposes:

• Essential cookies: Required for core functionality such as authentication and session management
• Analytics cookies: Used to understand how our apps are used so we can improve performance and user experience
• Preference cookies: Used to remember your settings and preferences within our applications

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of our applications. We do not use cookies for cross-site advertising or behavioural tracking.

7 App Uninstall & Data Removal

When you uninstall a TwigPixel app from your Shopify store:

• We receive an uninstall webhook notification from Shopify
• Access tokens associated with your store are immediately revoked
• Your merchant data may be retained for a limited period (typically up to 30 days) for legal, compliance, or dispute resolution purposes
• After the retention period, merchant and associated customer data is securely deleted from our systems

If you would like to request immediate deletion of your data following app uninstall, please contact us at hello@twigpixel.com and we will process your request in accordance with applicable laws.

8 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal obligations
• Portability: Request transfer of your data in a machine-readable format
• Objection: Object to certain types of data processing

To exercise any of these rights, contact us at hello@twigpixel.com. We will respond within 30 days.

9 Contact Information

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please reach out:

• Email: hello@twigpixel.com
• Response time: We aim to respond to all privacy inquiries within 5 business days

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify merchants of material changes via email or in-app notification. Continued use of our applications after changes constitutes acceptance of the updated policy.