Tagora privacy policy

Data we store

To run the app we store only what it needs:

• Store information: the shop's myshopify.com domain, admin language, currency, country and time zone, the current plan and usage counters for the billing period.
• The Shopify access token for the store (encrypted at rest by our hosting provider), used to read orders and write tags.
• The rules the merchant creates (names, conditions, tags).
• An activity log of tag changes: order and customer IDs, the order number (for example #1001), the tag, the rule name and the time. No names, email addresses, phone numbers or addresses.
• Technical records needed for reliability: a queue of order IDs waiting to be processed, IDs of received webhooks, per-order usage counters, and an audit record of privacy requests (IDs and counts only).

Data we read but don't store

When an order is created, paid, fulfilled or cancelled, Tagora reads that order from Shopify to check the merchant's rules: order totals, products (title, SKU, vendor, type, tags), discount codes, payment method, shipping method and shipping country, province, city and postal code, and the customer's number of orders, total spent and tags.

This data is used in memory to evaluate the rules and is not saved. Tagora never stores customer names, email addresses, phone numbers or addresses.

To send the one-time "monthly limit reached" email, Tagora reads the store's contact email from Shopify at sending time and does not store it.

How we use data

Only to provide Tagora's features: evaluating rules, adding and removing tags, showing the activity log and CSV export, counting usage for the merchant's plan and sending service emails about the app. We don't sell or rent data, don't use it for advertising, and don't use tracking cookies or analytics on the store or its customers.

Retention and deletion

• Activity log entries are deleted after 90 days.
• Usage counters are deleted after 60 days; webhook IDs after 7 days; finished background jobs after 7 days (failed ones after 30 days).
• When the app is uninstalled, the store's access token is deleted immediately and all background work stops.
• Shopify sends a shop deletion request 48 hours after uninstall; we then delete all data for that store. If that request doesn't arrive, we delete it automatically after 72 hours.
• Tags that Tagora added stay on the store's orders and customers after uninstall, because they are the merchant's store data. The app's "Tag cleanup" tool removes them before uninstalling.

Customer privacy requests (GDPR / CCPA)

Tagora supports Shopify's mandatory privacy webhooks. When a store's customer asks for their data, we report the activity log entries that reference that customer or their orders to the merchant through Shopify. When a customer asks to be deleted, we delete those entries, queued work and usage counters for their orders. Customers should contact the store they bought from; merchants can contact us at the email below.

Service providers and location

• Fly.io (hosting and database, United States).
• Resend (sending service emails to merchants, United States).
• Shopify (the platform the app runs on and where order and customer data lives).

Security

All traffic uses HTTPS. Requests from Shopify are verified with HMAC signatures, admin pages use Shopify session tokens, and access is limited to the permissions the app needs (orders, customers, products – read only for products).

Contact

Questions or requests about this policy: info@berkayyavuz.com. We may update this policy; the date above shows the latest version.