Privacy Policy

DiscountSpark ("we", "us") is a Shopify app that helps merchants control how many times a customer can use a discount code and view usage in a simple dashboard. This policy explains what information we process and why, in connection with a merchant's Shopify store ("Store").

1) Scope & Role

We act as a service provider / processor to the Store. The Store is the controller of its customers' data. We only process information needed to provide the app's features.

2) Data we receive

We subscribe only to Shopify's orders/create webhook. If an order does not include a discount code created via DiscountSpark, we ignore it and store nothing. If it does, we store only the following order fields for dashboard display:

• order Id, order Number, Order Date
• order Total, Currency,
• Discount Code, Discount Id, discount Amount
• Customer Discount Usage Count, Merchant Shop Name

Customer data: we access only Level 1 protected customer data categories as defined by Shopify, solely to enforce per-customer discount limits (e.g., existence of a customer and the app's consumption metafield). We do not store other customer attributes.

Error handling: if a webhook fails to process, we may temporarily log/store the relevant JSON payload for debugging and reliability, then remove it once resolved.

3) How we use the data

• Apply or reject the discount in accordance with the Store's configured rules.
• Display discount usage on the dashboard (per order, per discount).
• Maintain service reliability, troubleshoot failures, and protect the app from abuse.

4) What we don't do

• We do not sell or share personal information. AT ALL. ANYWHERE. EVER.
• We do not use customer/order data for any purpose unrelated to the app's features.

5) Data retention & deletion

We retain only the minimal order fields listed above while the app remains installed. When a merchant uninstalls the app, all associated data with the merchant is deleted from our databases.

6) Security

Data is transmitted over HTTPS. We host our application on modern cloud infrastructure and apply access controls and least-privilege practices appropriate for the limited scope of data we handle.

7) Sub-processors

We use Shopify's platform APIs and cloud infrastructure providers to deliver the app (e.g., hosting/compute and databases).

8) Your rights

Merchants are responsible for honoring data subject requests from their customers (e.g., access, correction, deletion). We will assist the merchant to the extent we can as a processor when contacted by the Store.

9) Contact

Questions? Email us at [email protected].