Privacy Policy

Who we are

The App is operated by Forge Studio, an independent software studio based in China. Questions or privacy requests can be sent to support@forgestudioapps.com.

Information we process

Merchant and Shopify account information

We process the merchant’s Shopify store domain, installation and permission details, authentication tokens, and session information needed to connect the App to Shopify. When Shopify includes it in an authorized session, this information may include the Shopify user’s account identifier, name, email address, locale, and account role.

Bundle and product information

We process Bundle names, status, product and variant identifiers, product titles, images, availability information, discount rules, variant recommendations, storefront appearance settings, and Shopify synchronization status. Shopify remains the source of truth for product prices, inventory, and availability.

Order and refund information

To provide attributed Bundle analytics, we process Shopify order identifiers and order names, timestamps, currencies, product and variant identifiers, product titles, quantities, prices, discounts, and refund amounts for orders connected to a Bundle. The App does not intentionally store customer names, customer email addresses, phone numbers, shipping or billing addresses, or payment details in its analytics records or background-job payloads.

Consent-aware storefront analytics

When a shopper’s applicable Shopify analytics consent permits it, the App’s Shopify Web Pixel records limited Bundle events such as a view, interaction, reached discount tier, and add-to-cart action. We store the event identifier and time, Bundle identifier, limited product-count and currency fields, and a one-way HMAC hash of the Shopify client identifier. We do not store the raw client identifier or the page URL, and we do not use these events as proof of revenue.

Technical information

We process limited service logs, error details, request paths, and deployment or synchronization metadata to secure, operate, and troubleshoot the App. A network address may be processed transiently in hashed form for abuse prevention and rate limiting.

Cookies and similar technologies

The App and Shopify use strictly necessary session technologies to authenticate merchants, maintain secure sessions, and prevent abuse. Storefront Bundle analytics are processed only when Shopify indicates that the shopper has provided the applicable analytics consent. We do not use App data for advertising cookies or cross-site advertising tracking.

How we use information

• Authenticate merchants and connect the App to Shopify.
• Create, display, and synchronize Bundle configurations.
• Validate and apply merchant-configured Bundle discounts.
• Provide order, refund, usage, and conversion analytics.
• Verify the merchant’s App plan and related entitlements.
• Prevent abuse, maintain reliability, and provide support.
• Meet legal, security, and Shopify platform requirements.

We do not sell personal information and do not use App data for third-party advertising or unrelated profiling.

Legal bases for processing

Where applicable law requires a legal basis, we process information as necessary to provide the App under our agreement with the merchant; for our legitimate interests in securing, maintaining, improving, and supporting the App; with consent for storefront analytics where consent is required; and to comply with legal or Shopify platform obligations. We balance our legitimate interests against the rights and interests of affected individuals.

How information is shared

We share information only as needed to operate the App, comply with law, or protect the service. Service providers currently include Shopify for the commerce platform and app infrastructure, Railway for application and database hosting, and GitHub for encrypted backup automation and software delivery. Operational notification providers may receive limited, redacted incident metadata when an alert is required. These providers process information on our behalf under their applicable terms and security commitments.

We may disclose information when required by law, legal process, or a valid government request, or when reasonably necessary to protect merchants, shoppers, Forge Studio, or the public.

Retention and deletion

Bundle configuration, attributed sales, consent-aware analytics, installation records, and plan records are generally retained while a merchant uses the App so the App can provide its features and historical reporting. Successful background-job payloads are erased immediately after processing. Completed job metadata is removed after 14 days, and failed job metadata is removed after 90 days.

We process Shopify’s mandatory customer and shop redaction webhooks. A customer redaction request removes matching attributed order and queued records. A shop redaction request removes the shop’s sessions, Bundles, sales, storefront analytics, synchronization data, plan records, and background jobs from the active database. Encrypted backups are retained for up to 30 days and expire on their normal rotation schedule.

Security

We use access controls, authenticated Shopify requests, encrypted network connections, encrypted backups, data minimization, request limits, and operational monitoring designed to protect information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

International processing

Forge Studio is based in China, and service providers may process information in other countries where they operate. Where applicable, we use the protections required by law for international transfers.

Your choices and rights

Depending on applicable law, merchants and individuals may have rights to request access, correction, deletion, restriction, or a copy of personal information. Merchants can uninstall the App to stop future App processing. Shoppers should normally contact the merchant whose store they used; merchants and shoppers may also contact Forge Studio at support@forgestudioapps.com. We may need to verify a request before acting on it.

Changes to this policy

We may update this policy when the App, our data practices, or legal requirements change. We will publish the updated version on this page and revise the effective date above.