Privacy Policy

What we access and store

When you install Tierly, Shopify provides us with a session record needed to operate the app: your store domain, an access token, and the name, email, and user ID of the staff member who installs or uses the app. We also read and write your store's discounts (the volume-discount campaigns you create) via the Shopify Admin API.

To power the in-app Analytics, Tierly is granted access to your store's orders (the read_orders scope). When an order is placed, we read it to measure the impact of your volume-discount campaigns and store a small attribution record for that order. This record contains only: the order ID, the order subtotal, the discount amount Tierly applied, the number of discounted units, and the campaign name(s) involved. Shopify classifies order data as protected customer data, which is why our App Store listing notes this access; we request it solely for analytics.

What we do NOT collect

We do not collect or store your customers' personal information: no names, no email addresses, no phone numbers, and no shipping or billing addresses. We do not build customer profiles, track customers across sites, or use any data for advertising. The discount itself is calculated at checkout by a Shopify Function running on Shopify's infrastructure.

How we use it

Session and discount data are used to authenticate the app and operate the campaigns you configure. Order attribution data is used only to show you aggregate analytics inside the app. We do not sell, rent, or share your data with third parties, and we do not use it for advertising.

Data retention & deletion

We keep your session and order-attribution data only while the app is installed. When you uninstall Tierly, we delete your session immediately. Shopify also sends us a shop/redact request 48 hours after uninstall, at which point any remaining data for your store — including the order-attribution records — is erased. When Shopify sends a customers/redact request for a specific customer, we delete the attribution records linked to that customer's orders.

Your GDPR rights

You can request access to, or deletion of, your data at any time. Tierly does not store direct customer identifiers such as names, emails, phone numbers, or addresses; the only customer-linkable data we hold is the order-attribution records described above, keyed by order ID. In response to a customers/data_request, we provide the attribution records associated with that customer's orders; in response to a customers/redact, we delete them. For store-level data, contact us and we will respond within the timelines required by law.

Contact

Privacy questions or requests: [email protected].