Effective date: August 23, 2026
This Privacy Policy explains how the Giftly application (the “App”, “we”, “us”) collects, uses, stores and protects information when a Shopify merchant (the “Merchant”, “you”) installs and uses the App on a Shopify store, and when visitors of that store (“Customers”) interact with the storefront widgets the App provides (gift milestones, the gift vault a shopper picks their free gift from, and paid gifting extras such as wrap, message cards, gift receipts and premium boxes).
Giftly is the developer and data controller/processor for the App. The App is distributed through the Shopify App Store and runs as an embedded Shopify admin app together with a theme app extension that renders the gift widgets on your storefront. You can reach us at support@trackwise.studio.
With respect to store and order data processed on your behalf, you (the Merchant) are the data controller and we act as your data processor. Shopify is the platform provider.
The App accesses the following categories of data through Shopify’s official APIs and webhooks, using only the permissions you grant at installation:
| Category | Examples | Do we store it? | Purpose |
|---|---|---|---|
| Store & account | Store domain (*.myshopify.com), Shopify access token, staff user id / name / email associated with the installing session, granted scopes |
Yes | Authenticate the App and keep it connected to your store |
| Product catalog | Product & variant ids, titles, images, prices, handles, inventory/status, collections, publications | Snapshots only (title/image/price/handle needed to render the gift widgets) | Let you pick the gifts in your gift vault and display them to shoppers |
| Discounts | The automatic discount configuration created by the App via Shopify Functions | The discount id is stored; the discount itself lives in Shopify | Make the gift lines a shopper actually earned free at checkout |
| Themes | Read access to your themes' names and settings, to check whether the Giftly app embed is turned on | No | Show you in the app whether Giftly is turned on in your themes |
| Orders | Order id, line items, line prices/quantities, and the App’s own line-item properties (e.g. _gftly_gift, _gftly_opt) |
Only order id, attributed revenue, and which gift or gifting extra was taken | Measure which campaigns drove sales (attribution & revenue reporting) |
| Gift grants | Which gift (variant) was granted, on which campaign and milestone, its retail value, the order id, and the Shopify customer id where the order has one | Yes | Enforce your budget cap and per-customer gift limits, and report gift cost |
| Gift campaign settings | Your campaigns, milestones, gift vault contents, gifting extras, eligibility rules and widget appearance settings | Yes | Store your configuration so your campaigns work across sessions |
| Widget analytics | Event type (impression / milestone unlocked / gift claimed), the module (gift, gifting extra) and an internal campaign id | Yes (aggregated, non-identifying) | Show you performance metrics in the App dashboard |
orders/create webhook and has read_orders access.
Order payloads delivered by Shopify may contain customer information, but the
App reads only the line items with their prices/properties and, when the
order was placed by a logged-in shopper, Shopify’s customer id — the
latter solely to stop the same customer claiming more gifts than your
per-customer limit allows. We do not read, store or transmit customer
names, email addresses, shipping/billing addresses, phone numbers or payment
information.
The storefront widgets run in the shopper’s browser to show gift progress, let the shopper choose a gift and add it to the Shopify cart. In doing so:
/cart.js) to show the right milestone progress and the gifts that have been unlocked.We do not use your data for advertising and we do not sell it.
At installation the App requests only the access scopes it needs to function:
| Scope | Why it is needed |
|---|---|
read_products, write_products | Read products/variants for gift campaigns; create hidden linked products for paid gifting extras |
write_discounts | Create and manage the automatic discount that makes earned gift lines free at checkout |
read_orders | Record which gifts were granted and attribute completed orders to the campaigns behind them |
read_themes | Check whether the Giftly app embed is turned on in your themes, and whether a theme is an Online Store 2.0 theme |
read_publications, write_publications | Publish gifting-extra products to your sales channels so they are purchasable |
We do not sell your data. We share data only with the infrastructure providers required to run the App:
| Sub-processor | Purpose |
|---|---|
| Shopify Inc. | Platform, APIs, webhooks, checkout and discount execution |
| Railway (application hosting & PostgreSQL database) | Hosts the App server and stores the data described above |
We may also disclose information if required by law or to protect our rights and users’ safety.
shop/redact request (typically 48 hours after uninstall). On receipt, the App permanently deletes all data associated with your store — gift campaigns, milestones, gift vault entries, gifting extras, gift grant records, analytics events, settings and session records.customers/data_request and customers/redact, which are verified by HMAC and acknowledged on receipt. The App holds no customer names, emails, addresses or payment details; the only customer-linked value is Shopify’s pseudonymous customer id on a gift grant record. Where such a record exists, we return or erase it on request at support@trackwise.studio.Depending on your jurisdiction, you and your customers may have rights to access, correct, delete, restrict or port personal data, and to object to certain processing. Because the App stores no customer contact or payment details, shopper requests are typically handled directly by the Merchant in Shopify. For data the App holds on your behalf — including gift grant records carrying a customer id — contact us and we will assist. You may also lodge a complaint with your local data protection authority.
The App is a business tool for merchants and is not directed to children. We do not knowingly collect data from children.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Effective date” above and, where appropriate, by notifying you. Continued use of the App after changes take effect constitutes acceptance of the updated policy.
Questions or requests regarding this Privacy Policy or your data can be sent to:
Giftly
Email: support@trackwise.studio