Privacy Policy

Effective date: July 13, 2026

Discount Codes & Rules ("the App") is a Shopify app that helps merchants create bulk and reusable discount codes and control which items and combinations are allowed at checkout. This policy explains what data the App collects, how it's used, and how it's handled.

Information we collect

• Store information: your shop domain and an access token issued by Shopify when you install the App, used to make API calls on your behalf.
• Discount configuration data: the titles, codes, percentages, eligible products/collections, and blocked product types you configure through the App.
• Customer identifiers only: when you use the reusable-code eligibility feature, the App stores Shopify customer ID references (e.g. gid://shopify/Customer/123) to build discount eligibility segments. We do not store customer names, email addresses, phone numbers, or physical addresses.
• Staff account information: if you access the App's embedded interface, Shopify's standard authentication may share basic staff account details (such as name and email) with the App as part of session verification. This is provided by Shopify, not collected directly by us.

We do not collect or store payment or financial information. Billing for paid plans is handled entirely by Shopify's Billing API — we only receive confirmation of your subscription status.

How we use this information

Data is used solely to provide the App's functionality: creating and managing discount codes, enforcing checkout-time discount rules, and computing customer eligibility for reusable codes. We do not sell this data or share it with third parties for marketing purposes.

Service providers

We use the following third-party services to operate the App:

• Shopify — the e-commerce platform this App is built on.
• Railway — hosting infrastructure and database storage.

Data retention and deletion

We retain shop data for as long as the App is installed on your store. When you uninstall the App, we automatically delete stored shop data, including session tokens, discount configuration records, and reusable code eligibility data. We also honor Shopify's mandatory privacy webhooks:

• Customer data requests — we do not store customer PII, so no additional data beyond what Shopify itself provides exists to disclose.
• Customer redaction — we remove the requested customer's ID from any discount eligibility lists we maintain.
• Shop redaction — we permanently delete all remaining data associated with your shop.

Security

Data is transmitted over encrypted (HTTPS) connections. Access tokens and shop data are stored in a private database that is not directly accessible to the public.

Cookies

As an embedded Shopify app, we rely on Shopify's session token authentication rather than persistent third-party tracking cookies. Cookies set by Shopify itself are governed by Shopify's own privacy policy.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

Contact us

If you have questions about this policy or how your data is handled, contact us at acsolis896@gmail.com.