ProductSwap privacy information

Draft for development. Owner action required: add the legal business name, address, privacy contact, hosting/subprocessor locations, retention commitments, and policy effective date before public distribution.

ProductSwap stores merchant authentication sessions, shop settings, approved product and option references, daily activity counts, and billing verification state. Purchase attribution records qualifying recommendation clicks and cart adds, pseudonymous shopping sessions, and verified Shopify order and refund facts: order and product references, quantities, timestamps, financial amounts, currencies and conversion rates. Billing records contain period totals, commission calculations and aggregated Shopify usage submissions.

Storefront analytics and attribution interactions are recorded only when Shopify’s Customer Privacy API allows analytics processing. Shopping remains available when analytics is unavailable or denied. Cart tokens are converted to a shop-specific keyed hash; raw cart tokens are not retained. The financial payload allowlist discards shopper names, email addresses, phone numbers, postal addresses and customer IDs. Merchant authentication sessions may contain the merchant user’s name, email and ID supplied by Shopify’s official authentication library.

Attribution sessions expire after 60 minutes of inactivity. Session records are cleaned after 90 days when no pending financial jobs need them; processed financial jobs and webhook receipts are cleaned after seven days. Display receipts expire after one hour. Cleanup runs every ten minutes while the server is running and at startup. Financial ledgers are retained for billing reconciliation under the owner’s published retention policy.

Uninstall revokes local merchant sessions and removes groups and activity counts. Financial records are retained for reconciliation; Shopify’s shop/redact request removes remaining tenant records. A verified customer erasure request removes the supplied order-linked financial records and retains anonymous period totals. Verified data requests are handled through the owner’s secure export procedure. Hosting request logs and backups are managed separately; the owner must configure redaction, access controls and retention before deployment.

Activity counts are operational estimates rather than unique shoppers. Attributed revenue includes only qualifying purchased recommended products verified against Shopify orders and applicable refunds. Shopify provides the authoritative usage charges and invoices.

Privacy requests: [OWNER: provide privacy email and process]. Support