Privacy Policy

1. Information We Collect

We collect and process information that is necessary to install, operate, secure, and support the App.

• Shop information made available through Shopify, including shop domain, store name, contact email, currency, timezone, and related installation metadata.
• Session and authentication data required to maintain secure access to the App, including Shopify tokens and granted app scopes.
• Offer configuration saved by merchants, including gift selections, trigger rules, targeting settings, translations, scheduling settings, and shop-level widget settings.
• Product, collection, market, and locale data made available through the App's approved Shopify scopes when needed to power merchant configuration and storefront targeting.
• Limited storefront interaction and analytics records, such as qualified sessions, popup opens, widget opens, gift claims, and related operational event metadata.

2. How We Use Information

• To authenticate merchants and maintain the App installation.
• To create, save, publish, and sync gift offers and automatic discount configurations.
• To render storefront offer experiences such as banners, popups, widgets, and auto-add gift flows.
• To apply targeting rules based on store configuration, device, language, market, domain, and merchant-defined audience settings.
• To provide support, troubleshoot issues, monitor service health, and improve App reliability.
• To comply with Shopify requirements and applicable legal obligations.

3. Customer and Buyer Data

The App is not designed to create or maintain customer profiles, order histories, or payment information outside Shopify.

If a merchant uses logged-in customer audience targeting, the App may retrieve limited customer tag information from Shopify at request time to evaluate targeting rules. That information is used for live rule evaluation and is not used to build independent customer profiles.

4. Disclosure of Information

We disclose information only as necessary to operate the App, comply with law, or protect the security and integrity of the service.

• To Shopify, where required for App functionality.
• To hosting, infrastructure, database, logging, and support providers that process data on our behalf.
• To professional advisers or authorities where required by law, regulation, legal process, or to enforce our rights.
• If internal operational notifications are configured, limited shop contact and installation details may be included in those notices for support and service monitoring.
• We do not sell merchant data.

5. Data Retention and Deletion

• Shop and session records are retained while the App is installed and are deleted when we receive Shopify uninstall or shop redact requests.
• Shopify privacy webhook requests are handled in accordance with Shopify's required compliance process.
• The App does not currently persist customer-specific records for customer data request or customer redact workflows beyond acknowledging Shopify's required webhook callbacks.
• Operational analytics and configuration data are retained only as long as needed to operate the App, support merchants, and meet legal or contractual obligations.

6. International Processing

Information may be processed or stored in jurisdictions outside a merchant's country of operation, including where our service providers maintain infrastructure. We use reasonable measures intended to protect information in connection with such processing.

7. Your Rights and Requests

Depending on applicable law, merchants may have rights to request access to, correction of, or deletion of certain information we hold about them. Privacy-related requests may be sent to support@fourcore.dev.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the App, legal requirements, or our data practices. If we make material changes, we will update the effective date on this page.