Privacy Policy — Get That Sale

Introduction

Pixelaris S.L. ("we", "our") operates the Get That Sale application (the "App") for Shopify merchants.

This Privacy Policy explains how we collect, use, and protect information when you install and use our App.

Information We Collect

Store Information

When you install the App, Shopify provides us access only to the minimum information necessary for its operation:

• Store name
• Store domain
• Store contact email
• Basic settings (currency, timezone, and Shopify plan capabilities)

We minimize the information received from Shopify and use it only to operate merchant-configured discounts, offers, billing, and support.

Product Information (Non-personal)

To manage discounts correctly, we access:

• Product titles
• Variants and prices
• Inventory
• Tags, vendors, and collections
• Metadata needed to apply and restore discounts

Privacy-minimized Order Attribution

When promotion or upsell reporting is enabled, we process the minimum order data needed to verify redemptions, enforce merchant-set budgets, and reconcile refunds:

• Technical Shopify order, refund, and line-item identifiers
• Order subtotal, discount allocations, currency, and event timestamps
• Refund and cancellation state
• A keyed one-way customer identifier hash when needed for attribution, limits, or finding attributed orders for customer data access and erasure

We do not retain the customer's raw Shopify identifier for this attribution. Refund snapshots exclude product titles and customer, address, and payment fields.

Order reconciliation reads Shopify accounting evidence to recover missing events. Shopify requires customer read access to retrieve the technical customer identifier needed to honor data access and erasure requests. This reconciliation does not query customer names, contact details, or addresses. Its retry queue retains technical order identifiers, a keyed customer digest when available, observation times, and bounded diagnostic codes, not full order payloads.

Voluntary Survey Responses

Published Checkout, Thank You and Order Status surveys may collect a selected answer when the visitor chooses to submit and Shopify reports that analytics processing is allowed. We retain the answer identifier, merchant-authored question and option wording, publication version, receipt time, a random retry identifier, and a keyed token digest to prevent repeated submissions. We do not associate these responses with an order or customer, collect free-text answers through this service, or treat a response as a purchase. The checkout- or order-scoped retry reference remains in Shopify extension storage and is not sent to our server.

Information We Do Not Retain

Shopify's signed order and mandatory compliance webhooks can contain customer profile, contact, address, and other order fields. Get That Sale processes those payloads transiently, validates strict size and shape limits, and retains only the minimized fields listed above. We do not retain:

• Customer names, emails, phone numbers, or addresses
• Payment information
• Full webhook or order payloads, IP addresses, or unrelated browsing history
• Sensitive data unrelated to the App's functionality

How We Use Information

We use collected information exclusively to:

• Apply and manage product discounts
• Save original prices for correct restoration
• Ensure technical operation of the App
• Verify promotion redemptions, enforce budgets, and reconcile refunds
• Provide merchant-facing performance reporting
• Communicate with you regarding your account or technical support

We do not use information for external analytics or advertising.

Data Storage and Security

• All data is stored in encrypted databases
• Access tokens are stored encrypted with restricted access
• Our infrastructure uses industry-level security measures
• Servers are hosted with secure cloud providers

Data Retention

• We retain data while the App remains installed
• After uninstallation, Shopify sends the mandatory shop-redaction request and merchant-owned data is permanently deleted
• Customer redaction requests remove linked pseudonymous attribution and technical order/refund records without restoring already consumed campaign budgets
• Keyed customer and order deletion digests remain while the App is installed solely to prevent delayed webhooks from recreating redacted data
• Unmatched refund and cancellation bridge records expire after 30 days
• Completed order-recovery retry records are removed by reconciliation after seven days. Unresolved retry records remain until resolved or erased so incomplete accounting is not silently treated as complete; customer and shop redaction also remove these records.
• Voluntary survey responses expire after 90 days and are removed by scheduled maintenance; uninstallation also deletes them. Merchant reports use separate, temporary copies of aggregated question, option and response counts, without individual response or session identifiers. These copies expire within five minutes of creation, can briefly remain available after a source response expires, and are purged by maintenance or uninstallation. Reports downloaded by a merchant are under that merchant’s control. Because responses are not linked to customer identities, we cannot locate them by customer name or Shopify customer ID.
• Customer data-request reports are available to the authenticated merchant for 60 days and then deleted automatically
• Processed webhook delivery receipts are retained for a limited operational window and store a keyed shop hash rather than the raw shop domain

Third-Party Services

The App uses:

• Shopify API: to access and modify store information
• Database provider: for secure data storage
• Hosting provider: to run the App (e.g., Vercel)

Your Rights

You have the right to:

• Access: request a copy of the data we store
• Rectification: request correction of inaccurate data
• Deletion: delete your data by uninstalling the App
• Portability: request data in a portable format

You can request any of these rights by contacting us.

GDPR Compliance (EU Users)

For merchants located in the European Union:

• We process merchant and customer information only as needed to provide the App under the merchant's instructions and applicable law
• You can object to processing or request limitation
• We comply with GDPR obligations regarding security, transparency, and data minimization

CCPA Compliance (California Users)

If you reside in California:

• You have the right to know what information we collect and process
• You can request its deletion
• We do not sell personal information

Changes to This Policy

We may update this Privacy Policy. When we do, we will update the "Last updated" date at the top of this document.

Contact

If you have questions or wish to exercise your rights, you can contact us: