One Stop Volume Discounts Privacy Policy

1. Information obtained automatically upon Application installation

When you install or authorize the Application, Shopify transmits a limited set of store-level details to us, namely:

• Store domain (URL)
• Registered store-owner email address
• Names and metadata of installed themes

2. Additional sources of personal data

We may receive personal data through the following channels:

1. Direct provision by you — for example, when you contact our support team or otherwise supply information voluntarily.
2. Your connected Shopify account — information shared via Shopify's application-programming interfaces (APIs) in accordance with the permissions you grant.
3. Automated collection mechanisms embedded in the Application and its associated website (collectively, the "Site"), described below.

Automated Collection Mechanisms

Cookies – Small text files placed on your device that often contain an anonymous unique identifier. Cookies enable us to remember preferences, measure usage patterns, and enhance the Service. Most browsers allow you to control or disable cookies; further guidance is available at All About Cookies (http://www.allaboutcookies.org).

Server Log Files – As with many online services, our servers generate logs recording interactions with the Site. These logs may include your Internet Protocol (IP) address, browser type, Internet service provider, referring and exit pages, and the date and time of each visit.

Web Beacons, Tags, and Pixels – Minimal-sized electronic images that allow us to determine, for example, whether a specific page has been viewed, an email has been opened, or a link has been clicked. They support analytics, reporting, and performance monitoring for the Application.

3. Information about your customers and store visitors

To show you how your deals perform, the Application processes limited information about your customers and visitors to your store. It reaches us through the Application's storefront components and through Shopify's APIs and webhooks:

• Storefront activity: when a visitor sees a deal or adds it to the cart, we record the deal, product and variant identifiers, quantities, the cart identifier, the device type, the browser user agent and the page. A pseudonymous session identifier is added only when the visitor has allowed analytics. Activity from declared bots is discarded.
• Checkout and order details: checkout, order and cart identifiers, the products and variants bought, quantities, prices, the discounts applied, order totals and currency, payment transaction summaries as provided by Shopify (never card numbers), and the customer account identifier.

We do not collect your customers' names, email addresses, phone numbers or postal addresses.

We process personal data obtained through the Application solely for the objectives outlined below:

1. Service delivery and Application operation
   To enable, manage, and maintain the functionality of the Service.
2. Deal performance reporting
   To show you impressions, add-to-carts, orders, items sold and revenue for each deal, and to credit each order to the deal that discounted it. Information about your customers is used only for this purpose.
3. Operational communications
   To respond to inquiries and provide other updates essential to your continued use of the Application.
4. Maintenance and improvement
   To evaluate performance, uphold security, and develop enhancements that refine or extend the Service.
5. Informational and promotional outreach
   To inform you about product updates, related offerings, or limited promotions—always in accordance with applicable marketing laws and your stated preferences.

We do not process personal data for any purpose that is inconsistent with the objectives described above.

1. Analytics support (Google Analytics)
   We share limited usage data with Google Analytics to understand how the Application is used and to enhance the Service.
2. Service providers (subprocessors)
   Data is processed on our behalf by Heroku (application hosting), MongoDB Atlas (database), Google Cloud (delivery of Shopify webhooks), Netlify (collection of checkout events) and Axiom (server logs). They act only on our instructions, and the data is stored in the United States.
3. Legal or regulatory obligations
   Personal data may be disclosed when required by applicable law or a valid legal request, or when necessary to protect our rights or those of others.

We do not sell or rent personal data to any third party.

If you are a European resident, you may:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase data under certain conditions.

To exercise these rights, please use the contact form on the Site or reach out through Shopify customer support, referencing One Stop Volume Discounts.

Please note, that your information may be transferred outside the European Union, including to Canada and the United States.

For information about your customers and store visitors, you are the controller and we act as your processor. By installing and using the Application, you agree to these data processing terms:

• We process this information only to provide the Service as you configure it, and for no other purpose.
• Only staff who need it to operate or support the Service can access it, and they are bound by confidentiality.
• Data is encrypted in transit and at rest.
• We use only the service providers listed above and will update this page before adding a new one.
• We act on your customers' data requests and deletion requests received through Shopify's privacy webhooks.
• We will notify you without undue delay if we become aware of a breach affecting this information.
• When you uninstall the Application, we delete this information as described under Data Retention.