Privacy Policy

This Privacy Policy describes how Consentico ("the App", "we", "us"), provided by [Your Company Name], collects, uses, and shares information when a merchant installs and uses the App on their Shopify store. The App displays the EU legal guarantee notice and the GARAN durability label on Shopify storefronts.

1. Information we collect

Merchant and store information

When you install the App, Shopify provides us with limited information needed to operate it. We store:

• Your shop domain (for example, your-store.myshopify.com)
• The API access token and granted permission scopes issued by Shopify, used to access your store on your behalf
• Your App settings, such as notice placement, display style, geo-targeting, exclusion rules, and GARAN label appearance
• Product identifiers and titles, used for coverage alerts and to track which products display the GARAN label
• Your current subscription plan

Product data

With the read_products and write_products permissions, the App reads product details (such as title, vendor, tags, product type, and collections) and writes App-owned product metafields (GARAN status, duration, brand, model, and notice exclusion). These metafields are stored in your Shopify store, not on our servers.

Theme data

With the read_themes permission, the App checks whether its theme blocks are enabled in your theme so it can guide you through setup. We do not modify your theme code.

Customer data

The App does not collect, store, or process personal data of your customers. The storefront notice and label are rendered by Shopify's theme app extension; they do not set cookies, use tracking pixels, or send visitor data to us.

2. How we use information

• To provide, operate, and maintain the App
• To display the notice and label according to your settings
• To manage your subscription and billing through Shopify
• To provide support and respond to your requests
• To meet legal obligations and prevent misuse of the App

We do not sell your information and do not use it for advertising.

3. Sharing and service providers

We share information only with the service providers needed to run the App:

• Shopify: platform, authentication, and billing
• Heroku (Salesforce): application hosting (EU region)
• Supabase: database hosting (United States)

We may also disclose information if required by law or to protect our rights.

4. International transfers

Some of our service providers are located outside the European Economic Area. Where information is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Data retention and deletion

We keep your information only while the App is installed. When you uninstall the App, we delete your session, settings, and coverage alerts. We also honour Shopify's mandatory privacy webhooks, including shop data erasure requests, which Shopify sends 48 hours after uninstallation. App-owned metafields remain in your Shopify store until you remove them.

6. Security

Data is transmitted over HTTPS and stored with our hosting providers using access controls. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

7. Your rights

Depending on where you are located, including under the EU General Data Protection Regulation (GDPR), you may have the right to access, correct, delete, or export your information, and to object to or restrict its processing. To exercise these rights, contact us at the email below. You also have the right to lodge a complaint with your local data protection authority.

8. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page, and the "Last updated" date will be revised.

9. Contact us

For questions about this Privacy Policy or your data, contact [Your Company Name] at [support@example.com].