Privacy Policy

1. Overview and Commitment

Converti (“we”, “our”, or “us”) provides an on-storefront coupon wallet and promotion optimization application for merchants operating on the Shopify platform.

We are deeply committed to protecting the privacy and security of both Shopify merchants who install our application (“Merchants”) and customers visiting Merchants' storefronts (“Shoppers”).

2. Information We Collect

A. From Shopify Merchants:

• Shopify Store Information: Store domain (e.g. store.myshopify.com), primary email address, store owner name, timezone, and currency.
• Discount Configurations: Discount rules, discount codes, eligibility conditions, minimum purchase thresholds, and styling preferences configured inside the Converti admin dashboard.

B. From Storefront Shoppers (End-Users):

• Session State Data: An ephemeral, anonymous session identifier used solely to remember which coupons a shopper has clipped across storefront browsing.
• Cart Metadata: Cart subtotal, item counts, and currency to verify promotion eligibility (e.g. validating a “Free Shipping over $75” condition).
• Technical Interaction Telemetry: Aggregated, non-personally identifiable metrics such as coupon clip events, widget open/close events, and discount auto-application success rates.

Note: Converti does not collect, access, or store shopper credit card numbers, payment credentials, passwords, or home addresses.

3. How We Use Collected Information

We process data strictly for the following purposes:

• To render the Converti coupon wallet widget on the Merchant's storefront.
• To maintain the shopper's clipped coupon state across page transitions and cart updates.
• To automatically submit valid, clipped coupon codes into Shopify's native checkout.
• To provide Merchants with anonymized aggregate analytics regarding coupon performance and conversion lift.
• To detect and prevent discount fraud, code scraping, and unauthorized abuse.

4. Shopify API Compliance & Mandatory Webhooks

Converti complies with Shopify's API License and Terms of Use, including the implementation of mandatory compliance webhooks:

• customers/data_request: When a customer requests their data via Shopify, we promptly furnish any stored data associated with their record.
• customers/redact: When a customer requests erasure of their data, any associated logs or session records are permanently deleted within 48 hours.
• shop/redact: Upon app uninstallation by a Merchant, all store configurations and cached tokens are purged in accordance with Shopify data retention policies.

5. Local Storage, Cookies & Session Tokens

Converti utilizes browser localStorage or secure session cookies solely for functional purposes:

• To maintain a list of discount codes the shopper has explicitly clipped during their visit.
• To remember if an exit-intent or welcome banner has already been dismissed by the user.

These functional tokens are stored locally on the shopper's device and are not used for cross-site tracking, advertising networks, or third-party profiling.

6. Data Security and Retention

All data transmission between the Merchant storefront, Converti edge CDN, and Shopify APIs is encrypted using industry-standard TLS 1.3 encryption. Data stored in our database infrastructure is encrypted at rest (AES-256).

Transient shopper interaction logs are automatically rotated and anonymized within 30 days.

7. Your Rights (GDPR, CCPA & Global Privacy)

Depending on your location, you have statutory rights regarding your data, including:

• The right to know what personal data is processed.
• The right to request deletion or restriction of your data.
• The right to opt-out of data collection.

Storefront shoppers should contact the respective Merchant directly for customer data requests. Merchants may submit requests directly to our privacy team.

8. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to: