38c03cd1ae
Protected customer data (Level 1): order ids are stored as keyed HMACs, order numbers and ids for admin links as AES-256-GCM ciphertext (DATA_ENCRYPTION_KEY). New public /terms page with processor terms; privacy policy links to it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
36 lines
2.2 KiB
TypeScript
36 lines
2.2 KiB
TypeScript
// Public privacy policy (required for the App Store listing): https://<app domain>/privacy
|
|
import type { MetaFunction } from "react-router";
|
|
|
|
export const meta: MetaFunction = () => [{ title: "Privacy policy · Offerlyst" }];
|
|
|
|
const CONTACT = "info@metatroncubesolutions.com";
|
|
|
|
export default function Privacy() {
|
|
return (
|
|
<main style={{ maxWidth: 720, margin: "48px auto", padding: "0 20px", font: "16px/1.6 system-ui, sans-serif", color: "#1a1a1a" }}>
|
|
<h1>Privacy policy</h1>
|
|
<p>Last updated: October 14, 2026. This policy explains what the Offerlyst app (by Metatroncube Software Solutions) collects when a merchant installs it on a Shopify store.</p>
|
|
|
|
<h2>What we collect</h2>
|
|
<ul>
|
|
<li><strong>Store information:</strong> shop domain, currency, timezone and the plan you choose, to run the app.</li>
|
|
<li><strong>Offers you create:</strong> names, descriptions, images, product and collection references, dates and settings.</li>
|
|
<li><strong>Order summaries:</strong> for bundle analytics we store the order ID and number, order total, the discount given and which offer applied.</li>
|
|
</ul>
|
|
<p>We do <strong>not</strong> collect or store customers' names, email addresses, phone numbers or addresses.</p>
|
|
|
|
<h2>How we use it</h2>
|
|
<p>Only to provide the app: apply bundle discounts, show offers on your storefront, and report bundle sales to you. We don't sell data or use it for advertising.</p>
|
|
|
|
<h2>Where it's stored</h2>
|
|
<p>On our servers and in your Shopify store (app metafields and one automatic discount). Data is encrypted in transit (HTTPS), and order identifiers are encrypted at rest (AES-256-GCM and keyed hashing). Our data processing terms are in the <a href="/terms">terms of service</a>.</p>
|
|
|
|
<h2>Retention and deletion</h2>
|
|
<p>When you uninstall the app, Shopify removes the app's discount and metafields. We delete all data about your store 48 hours after uninstall, when Shopify sends the shop/redact request. Customer data requests and redaction requests are answered as required; we hold no customer personal data.</p>
|
|
|
|
<h2>Contact</h2>
|
|
<p>Questions or requests: <a href={`mailto:${CONTACT}`}>{CONTACT}</a></p>
|
|
</main>
|
|
);
|
|
}
|