Privacy policy

This policy covers recartly.co and the ReApp Shopify app. Recartly builds tools for Shopify merchants. We collect only what each product needs to work, we don't sell data, and we don't use third-party advertising or analytics trackers.

recartly.co

If you sign up for early access we store your email address, the products you picked, and when you gave consent. We use them only to email you about those products. Every email has an unsubscribe link, or write to [email protected] and we'll delete your sign-up.

Like any website, our hosting provider processes your IP address to deliver pages and stop abuse. We don't set tracking cookies.

ReApp: data about merchants

When a merchant installs ReApp, Shopify gives us the store's domain and name, and access tokens that let ReApp act for the store within the permissions the merchant approved. We also store the store's ReApp settings (Home Screen name, icon colors, storefront design), its campaigns, its plan, and the phones the merchant paired with the ReApp merchant app.

ReApp: data about shoppers

ReApp stores data about a shopper only if they tap Allow on a store's notification prompt. Then we store:

• The push subscription their browser creates (an address at their browser's push service, plus encryption keys). This lets the store send them notifications.
• Their browser's user agent, to help the merchant understand which devices subscribed.
• Their Shopify customer ID, if they were logged in to the store, so the store can honor data requests.
• For each notification: whether it was delivered to the push service and whether it was tapped.

We don't collect shoppers' names, email addresses, phone numbers, addresses or payment details. Shoppers can stop notifications anytime in their browser or phone settings, and we remove subscriptions the push service reports as gone.

Who we share data with

• Shopify, which runs the platform and billing.
• Browser push services (for example Google, Apple, Mozilla, Microsoft), which carry each notification to the shopper's device. The content is encrypted end to end.
• Railway, our hosting provider, which runs our servers and database.

Deletion

When a merchant uninstalls ReApp, it stops running in their store right away. Shopify sends us a deletion request 48 hours later, and we delete all of that store's data: settings, campaigns, delivery records, subscriptions, paired phones and access tokens. When Shopify sends a request to delete a specific customer's data, we delete that customer's subscriptions.

Your rights

You can ask us what we hold about you, ask us to correct or delete it, or object to how we use it. Shoppers can also ask the store they bought from, which can send the request to us through Shopify. Email [email protected] and we'll reply within 30 days.

Changes

If we change this policy we'll update the date above. For significant changes we'll tell merchants inside the app.