App Privacy Policy

Last Updated: 2025.06.13.

This Privacy Policy describes how Color And Code ("we", "us", or "our") collects, uses, and discloses your information in connection with your use of our Shopify application, Targeted Auto Discounts by Tag (the "App").

This policy applies to merchants who install the App on their Shopify store and to their customers whose data may be processed by the App as part of its functionality.

1. Information We Collect

When you install and use the App, we may access and collect the following types of information from your Shopify store:

Shop Information: Your Shopify store URL, store name, contact email, and timezone. This information is necessary for the basic functioning of the App and for communication purposes.
Discount Configuration Data: Information you provide to configure discounts, such as discount titles, percentages, customer tags, product tags, and specific product IDs. This data is essential for the App to apply discounts as per your settings.
Customer Data (Limited): To apply discounts based on customer tags, the App accesses customer tag information associated with orders or customer profiles. We do not store personally identifiable customer information beyond what is necessary to evaluate tag-based discount eligibility during the cart/checkout process.
Product Data: To apply discounts based on product tags or specific product IDs, the App accesses product information (like product IDs and product tags).
Order Data (Limited & Processed in Real-time): The App interacts with cart and order data in real-time via Shopify's APIs (e.g., Shopify Functions) to determine discount eligibility and apply discounts. This data is typically processed transiently and not stored long-term by the App, other than what Shopify itself stores as part of the discount application record.

We do not collect sensitive personal information such as credit card details, financial information (other than what's related to discount values), or detailed personal profiles of your customers.

2. How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Maintain the App's Functionality: Primarily to enable the creation, management, and application of automated discounts based on the rules you configure.
To Communicate With You: To send you updates about the App, respond to your support inquiries, or inform you of important changes.
To Improve Our App: We may use aggregated and anonymized data to understand usage patterns and improve the App's features and performance.
To Comply with Legal Obligations: If required by law or in response to valid legal processes.

3. How We Share Your Information

We do not sell, rent, or trade your personal information or your customers' information. We may share information under the following limited circumstances:

With Shopify: The App operates within the Shopify platform and interacts with Shopify APIs. Information is shared with Shopify as necessary for the App to function (e.g., creating and applying discounts). Shopify's use of data is governed by its own privacy policy.
Service Providers: We may use third-party service providers for hosting, analytics, or customer support. These providers are only given access to the information necessary to perform their services and are obligated to protect your data. (If not applicable, state: "We currently do not use third-party service providers that have access to your data beyond Shopify itself.")
Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud, or protect the personal safety of users of the App or the public.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

4. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, use, alteration, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

5. Data Retention

We retain your configuration data as long as the App is installed on your Shopify store and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Data processed transiently for discount application (like cart contents) is not retained by the App. Anonymized and aggregated data may be retained for analytical purposes.

6. Your Rights

As a merchant, you have control over the data within your Shopify store. You can:

Access and update your discount configurations within the App.
Uninstall the App, which will typically cease further data collection by the App (refer to Shopify's processes for data removal upon uninstallation).

For your customers, their data rights are primarily managed through your Shopify store and your own privacy policy. Our App processes customer data on your behalf as instructed by your configurations.

7. International Data Transfers

(If applicable, describe where data is processed and stored, e.g., "Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside [Your Country/Region] and choose to use our App, please note that we transfer the data to [Your Country/Region] and process it there.")

(If not applicable or data is processed within Shopify's infrastructure globally, you might state: "Data is processed within Shopify's global infrastructure, subject to Shopify's data processing agreements and policies.")

8. Children's Privacy

Our App is not intended for use by children under the age of 13 (or a higher age threshold as required by applicable law). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App, on our website, or by sending you an email. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted.