Privacy Policy

1. Introduction

Welcome to Gale Add To Cart Bar ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.

2. Information We Collect

2.1 Store Information

When you install our app, we collect:

• Shop domain and basic store information
• Store owner email address
• Product information (titles, images, prices, variant IDs) for selected products
• Theme information for app extension functionality

2.2 Configuration Data

We store your add to cart bar configurations, including:

• Bar names and titles
• Selected products and their details
• Design settings (colors, typography, backgrounds, positions)
• Button text and styling preferences
• Publish status and timestamps

2.3 Usage Data

We automatically collect:

• App usage patterns and feature interactions
• Subscription plan information
• Number of published bars

2.4 Customer Interaction Data

We store minimal customer interaction data in browser localStorage, including bar close timestamps to prevent repeated displays within 24 hours. This data remains on the customer's device and is not transmitted to our servers.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the add to cart bar functionality
• Display your selected products to store visitors
• Process add to cart actions from customers
• Store and retrieve your bar configurations
• Manage subscription plans and billing
• Improve and optimize our app features
• Provide customer support and respond to inquiries
• Send important updates about the app
• Ensure compliance with Shopify's terms of service

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted using SSL/TLS protocols
• Configuration data is stored securely in Shopify metafields
• Access to data is restricted to authorized personnel only
• Regular security audits and updates are performed
• We comply with Shopify's security requirements and best practices
• Authentication is handled through Shopify's OAuth system

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Shopify: As required for app functionality and compliance. All data is stored in your Shopify store's metafields
• Service Providers: With trusted third-party services that help us operate our app (e.g., hosting providers)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services:

• Bar configurations are stored in your Shopify store's metafields and remain until you delete them or uninstall the app
• When you uninstall the app, your data remains in your Shopify store's metafields unless you explicitly request deletion
• Subscription information is retained as required for billing and legal compliance
• Aggregated, anonymized data may be retained for analytics purposes

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data through the app interface
• Deletion: Request deletion of your data by uninstalling the app or contacting us
• Portability: Export your bar configurations through the app
• Objection: Object to certain data processing activities
• Withdrawal: Withdraw consent at any time by uninstalling the app

To exercise these rights, please contact us using the information provided below.

8. Cookies and Local Storage

Our app uses browser localStorage to store preferences on customer devices. We do not use cookies for tracking purposes. The localStorage data includes:

• Bar close timestamps (to prevent repeated displays within 24 hours)
• Subscription plan information (for store owners only)

This data can be cleared by the user at any time through their browser settings.

9. Third-Party Services

Our app integrates with the following third-party services:

• Shopify: For store data, authentication, and data storage (metafields)
• Shopify App Bridge: For app functionality and resource picker

These services have their own privacy policies, and we encourage you to review them.

10. Children's Privacy

Our app is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information is primarily stored within Shopify's infrastructure. Shopify operates globally and may transfer data across borders. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Significant changes will be communicated via email or in-app notification.

13. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). Our legal basis for processing your data includes:

• Consent: When you install and use our app
• Contract: To provide the services you requested
• Legitimate Interest: To improve our services and prevent fraud

14. CCPA Compliance

For California residents, under the California Consumer Privacy Act (CCPA), you have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Shopify App Store Compliance

This app complies with Shopify's App Store requirements and data protection standards. For more information about Shopify's privacy practices, please visit Shopify's Privacy Policy.

17. Data Processing Agreement

By using our app, you acknowledge that:

• We act as a data processor on your behalf
• You remain the data controller for your customer data
• We process data only as instructed through the app interface
• We implement appropriate technical and organizational measures to protect data