This Privacy Policy describes how Outlinkers ("we", "us", or "our") collects, uses, and shares information when a Shopify merchant installs and uses the Outlinkers application (the "App").
1. Information we collect
When you install the App on your Shopify store, we receive and store the following categories of data through Shopify's official APIs:
- Shop information: your
.myshopify.comdomain, store name, primary email, store currency, and timezone. - Product data: product IDs, variant IDs, titles, handles, and feature images — used solely to render product pickers and bulk editors inside the merchant admin.
- App-generated data: outbound link configurations, per-variant overrides, button styling preferences, and display rules you create within the App.
- Click analytics: anonymous tap events on the App's storefront buttons, including a coarse timestamp, the destination domain, and a short referrer string. We do not store the shopper's IP address, full user-agent, customer ID, or any personally-identifiable shopper data.
2. How we use information
- To operate the App and render its admin and storefront features.
- To compute aggregate click analytics shown to you in the dashboard.
- To detect and prevent abuse or fraud.
- To respond to your support requests.
We do not sell or rent any merchant or shopper data, and we do not use it to train machine-learning models or for advertising.
4. Data retention and deletion
Merchant data is retained for as long as the App remains installed on your store. When you uninstall the App, we receive Shopify's app/uninstalled webhook and delete your shop record, link configurations, and associated analytics within 48 hours.
We additionally honour Shopify's mandatory GDPR webhooks: customers/data_request, customers/redact, and shop/redact. Because the App does not store shopper personal data, these requests are typically satisfied by confirming that no such data exists.
5. Security
All data is transmitted over HTTPS. App secrets, OAuth tokens, and database credentials are stored as encrypted environment variables. Database backups are encrypted at rest.
6. International transfers
Our hosting infrastructure may process data in regions outside your own jurisdiction (including the United States and the European Union). Standard Contractual Clauses apply where relevant.
7. Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your data. To exercise any of these rights, contact us at the address below.
8. Changes
We may update this Privacy Policy from time to time. Material changes will be communicated to active merchants via email or an in-app notice.
9. Contact
Questions, concerns, or data requests: support@outlinkers.com.