Privacy
What each app collects, why it needs it, how long it stays, and how to have it erased.
Last updated
The short version
Appal builds apps that run inside your Shopify admin and on your storefront. Each app asks Shopify for the smallest set of permissions it can do its job with, and one of them asks for none at all. We do not sell data, we do not share it with advertisers, and we do not build profiles of your customers.
Who is responsible
Appal operates this site and the apps described on it. For data an app processes on your behalf, you are the data controller and Appal is the data processor. For this website, Appal is the controller. Contact: support@appal.io.
What each app processes
| App | Shopify scopes | What it stores |
|---|---|---|
| Post Purchase & Upsell | read_products, read_orders, checkout extension | Funnel and offer settings, and per-order records of which offer was shown, accepted or declined. |
| Discount & Free Gift | write_discounts, write_cart_transforms, read_products | Your promotion rules and widget styling. No customer records. |
| A/B Testing & CRO | read_themes, read_orders | Test configuration, plus anonymous exposure and conversion events with a random visitor identifier. |
| Contact Form Builder | None | Your form definitions, and the submissions your shoppers send you, including any attachments. |
Personal data
Most of the apps never touch a shopper's personal details. The two exceptions are deliberate and narrow:
- Post Purchase & Upsell reads the buyer's name so the offer page can address them. Every such read is written to an access log recording the shop, the fields read and the reason, without the personal data itself appearing in the log line.
- Contact Form Builder stores exactly what a shopper types into your form, because that is the product. You decide which fields to ask for.
A/B testing uses a random identifier to keep a visitor on the same version between page loads. It is not linked to a name, an email address or an account.
Retention
- Configuration you create is kept while the app is installed.
-
Uninstalling triggers Shopify's
shop/redactwebhook. We handle it and erase the shop's data, including uploaded files. - Form submissions are kept until you delete them or uninstall, whichever comes first.
- Analytics events are retained for 24 months, then deleted.
Your customers' rights
All three of Shopify's mandatory privacy webhooks are implemented and do real work rather than acknowledging and ignoring the request:
-
customers/data_requestreturns the data we hold for that customer so you can respond to a subject access request. customers/redactdeletes that customer's records.-
shop/redactdeletes everything belonging to the shop, 48 hours after uninstall as Shopify specifies.
If a customer contacts you directly, raise it through your Shopify admin and the request reaches us automatically. You can also email us.
Sub-processors
- Shopify Inc. — the platform the apps run on.
- Railway — application hosting and managed PostgreSQL, with volumes and backups encrypted at rest.
That is the whole list. We do not run third-party analytics, advertising pixels or session recording inside the apps.
This website
appal.io is a static site. It sets no cookies, runs no analytics and embeds no third-party scripts, which is also why there is no cookie banner. Server logs kept by our host may record IP addresses for a short period for security and debugging.
Security
Traffic is served over TLS, webhook payloads are HMAC-verified, and test data is kept in a separate environment from production. More detail is on the security page.
Changes
If this policy changes materially we will update the date at the top and, for anything that affects how your data is handled, contact you before it takes effect.