Privacy Policy

Effective date: January 1, 2025

HaloDevs (“we”, “our”, “us”) operates the Free Shipping Bar Shopify application (the “App”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

When you install and use the App, we collect the following information:

From merchants (store owners):

Shopify store domain and shop ID
Shopify access token (stored encrypted, used to communicate with the Shopify API)
App configuration settings (bar thresholds, colors, messages, display rules)

From your store’s visitors (storefront analytics):

Approximate country (derived from IP address — the IP itself is never stored)
Device type (desktop or mobile)
Page URL where the bar was displayed
Cart subtotal at the time of impression (no product or personal data)
Anonymous session ID (randomly generated, not linked to any personal identity)
Analytics events: bar impression, threshold reached, and order completed

We do not collect:

Customer names, email addresses, or personal contact information
Payment information or order details beyond whether an order was completed
Precise geolocation (only country-level, derived and immediately discarded)

2. How We Use the Information

We use the collected data solely to:

Display the correct free shipping bar on your storefront
Calculate how much more a visitor needs to spend to qualify for free shipping
Provide analytics within the app dashboard (impressions, conversions, etc.)
Process billing via Shopify’s billing API
Respond to support requests

We do not use your data for advertising, sell it to third parties, or share it with analytics platforms (e.g., Google Analytics).

3. Data Storage and Security

All data is stored on servers located in the United States or European Union.
Shopify access tokens are stored encrypted at rest.
Data is transmitted over HTTPS.
Analytics events are automatically purged after 90 days.

4. Third-Party Services

We rely on a limited number of sub-processors:

Service	Purpose
Shopify	App platform, billing, storefront script delivery

No advertising networks, data brokers, or social media platforms receive your data.

5. Data Retention

Data type	Retention period
Merchant account and settings	Until app is uninstalled
Raw analytics events	90 days, then automatically purged
Aggregated analytics totals	Indefinite (no personal data)

When you uninstall the app, Shopify sends us a mandatory shop/redact GDPR webhook. Upon receiving this webhook, we delete all merchant data and associated storefront analytics within 48 hours.

If you or your customers are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

Right of access — request a copy of your data
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your data
Right to restriction — request limited processing
Right to data portability — receive your data in a portable format
Right to object — object to data processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Storefront visitor analytics do not include personally identifiable information. Visitors cannot be identified from the data we collect.

7. Children’s Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the Effective date at the top of this page. We encourage you to review this policy periodically.

9. Contact

For privacy inquiries, contact:

HaloDevs Email: [email protected]