Legal
Privacy policy
Draft. This policy describes how the app is being built to handle data. It has not been reviewed by a lawyer. Have one read it before the app is listed on the Shopify App Store, and check each section still matches the finished app.
This policy explains how Shaurya ("we") handles information in EZ Master Discount (the "app") and on this website at ezmasterdiscount.com.
Who is responsible
Shaurya develops and operates the app as an independent developer. For anything relating to your own customers, you are the data controller and we act as a processor for you. For data about you as a merchant, such as your store details and your support emails, we are the controller.
Contact for any privacy question: shaurya@ezmasterdiscount.com.
What the app accesses and why
The app asks for the narrowest set of Shopify permissions it can work with. Each one below is needed for a feature you can see in the app.
| Access | Why it is needed |
|---|---|
| Store profile | Store name, domain, currency and plan, so discounts are created against the right store and amounts are shown in your currency. |
| Discounts | To create, read, update and delete the automatic discounts you configure in the app. This is the core of what the app does. |
| Products, read only | To show product names and prices in the editor so you can see what a tier will do before you save it. |
Information about you
When you install the app, Shopify gives us your store domain, the account email on the store and the plan the store is on. If you email support, we hold that message and your reply address.
Information about your customers
The app does not store personal data about your customers. Discounts are calculated by Shopify inside the checkout using Shopify Functions, so cart contents, customer names and payment details are never sent to us and are never stored by us.
Website visitors
This website sets no cookies, loads no third-party scripts and loads no third-party fonts. Nothing on it tracks you. Our hosting provider processes standard server logs, including IP address and the page requested, to serve the site and keep it available.
Why we are allowed to process this data
- Contract. To provide the app you installed and the plan you are on.
- Legitimate interests. To keep the service secure, fix faults and answer support requests.
- Legal obligation. To keep billing records and respond to lawful requests.
How long data is kept
- Discount configuration is kept while the app is installed on your store.
- After you uninstall, your store data is erased within 30 days, and immediately when Shopify sends the shop redaction webhook 48 hours after uninstall, whichever comes first.
- Support emails are kept for 24 months, then deleted.
- Billing records held by us are kept for as long as tax and accounting rules require.
Shopify GDPR requests
Shopify sends every app three mandatory privacy webhooks. The app responds to all three.
- customers/data_request
- Sent when one of your customers asks what data an app holds on them. Because the app holds no customer records, the response confirms that nothing is held, so you can pass that on within the period Shopify sets.
- customers/redact
- Sent when a customer asks to be deleted. Any data that happens to be held for that customer is erased.
- shop/redact
- Sent by Shopify 48 hours after a store uninstalls the app. Everything stored for that store is erased.
To make a request directly, email shaurya@ezmasterdiscount.com with "Data request" in the subject line. You get an answer within 30 days, and usually within 1 business day.
Who else processes the data
The app runs on Shopify and on a small number of infrastructure providers used for hosting, data storage and support email. Each is bound by a data processing agreement, and the list is kept short on purpose. For the current list of providers and the regions they operate in, email shaurya@ezmasterdiscount.com and you will get it in writing.
We do not sell personal data, we do not share it for advertising, and there are no analytics or advertising trackers in the app or on this site.
International transfers
Data may be processed outside the country where your store is based. Where data leaves the European Economic Area or the United Kingdom, transfers rely on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum.
Security
Connections are encrypted in transit, access tokens are stored using the platform's secret management, and access to production systems is limited to the developer who maintains the app. No system is perfect, so if you think you have found a security problem, email shaurya@ezmasterdiscount.com and it will be treated as urgent.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, and to object to certain processing. Email shaurya@ezmasterdiscount.com to use any of these rights. You can also complain to your local data protection authority.
Children
The app is a business tool and is not directed at anyone under 16.
Changes to this policy
If this policy changes in a way that affects you, the date at the top is updated, and for material changes we email the address on your store account.
Contact
Shaurya, developer of EZ Master Discount
shaurya@ezmasterdiscount.com