Privacy Policy

Last updated: July 2026

This Privacy Policy describes how BadgeBoost ("the App", "we", "us", or "our") collects, uses, and protects information when you install and use the App through the Shopify platform. By installing or using the App, you agree to the practices described in this policy.

1. Information We Collect

We collect only the information necessary to provide the App's functionality:

• Shopify Store Data — Your store domain and OAuth access and refresh tokens, used exclusively to make authorized API calls on your behalf (for example, to install the badge script and process billing).
• Product Information — Product details such as titles, tags, prices, compare-at prices, inventory quantities, and creation dates. This is read at display time and used solely to evaluate which badges should appear on your products.
• Badge Rule Configuration — The badge type, label, colors, position, priority, and rule settings you configure within the App's dashboard.
• Billing Information — Your charge status, managed via Shopify's billing API. We do not store payment card details.

BadgeBoost does not collect, store, or process your customers' personal information, order data, or any personally identifiable information (PII).

2. How We Use Your Information

• To authenticate with your Shopify store and perform authorized API operations.
• To display product badges on your storefront according to the rules you configure.
• To install and manage the storefront script that renders your badges.
• To process the one-time app charge through Shopify's billing system.
• To investigate errors, improve reliability, and provide support.

3. Storefront Script

BadgeBoost installs a lightweight JavaScript file on your storefront using Shopify's ScriptTag API. When a shopper loads a page, this script reads publicly available product data from your store and overlays the appropriate badges on product images. The script does not track shoppers, set advertising cookies, or collect any visitor personal data.

4. Data Storage and Security

Your data is stored in a secured database. Shopify access and refresh tokens are stored securely and used exclusively for API calls to your own store. We implement industry-standard security practices including encrypted connections (HTTPS/TLS), access controls, and regular reviews. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal or store data to third parties. We may disclose information only in the following limited circumstances:

• Service Providers — Infrastructure and hosting providers who process data solely on our behalf and under confidentiality obligations.
• Shopify — As required to operate the App and process billing through the Shopify platform.
• Legal Requirements — If required by applicable law, court order, or governmental authority.
• Business Transfers — In connection with a merger, acquisition, or sale of business assets, with prior notice to affected merchants.

6. Shopify API Compliance

The App accesses your Shopify store data solely through the permissions you grant during installation. We use only the API scopes necessary for the App's stated functionality. We comply with Shopify's API Terms of Service and Partner Program Agreement.

7. Data Retention and Deletion

We retain your store data and badge rule configuration for as long as the App is installed on your store. In accordance with Shopify's mandatory compliance webhooks:

• When you uninstall the App, your store is deactivated and the storefront script is removed.
• When Shopify sends a shop data erasure (shop/redact) request — typically 48 hours after uninstallation — we permanently delete your store record and all associated badge rules.
• Because we do not store customer PII, the customers/data_request and customers/redact webhooks are acknowledged with no customer data to return or delete.

8. Your Rights

You have the right to:

• Request access to the personal data we hold about your store.
• Request correction or deletion of your data.
• Uninstall the App at any time, which will stop all data processing.

To exercise these rights, contact us at the email address below.

9. Cookies and Tracking

The App is embedded within the Shopify Admin and uses only a single functional session cookie to keep you signed in to the dashboard while you use it. It does not use cookies for tracking or advertising purposes.

10. Children's Privacy

The App is intended for use by Shopify merchants and is not directed at individuals under the age of 16. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the App or by email. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us:
Email: rajat.bhatia.7150@gmail.com