This policy explains what information the Shopify app Bogox Announcement Bar ("the app", "we", "us") collects, why we collect it, how long we keep it and how it is deleted. It applies to merchants who install the app, to their staff, and to the shoppers who visit stores that use it.
1. Who we are and what the app does
The app is developed and operated by Bogox. Contact: [email protected].
The app lets merchants show announcement bars in their online store: a bar at the top or bottom of the page or at the top of the cart page, with a single message, a running line or rotating messages. A bar can include a title, a subheading, a coupon code, an icon, a button or link, a close icon, translations and a schedule, and it can be limited to certain pages and countries. The bars appear in the store through a Shopify theme app extension (an app embed and an app block). The app is free and does not process any payment information.
For the merchant's own account data, we decide how that data is used, as this policy describes. For the data of a store's shoppers, we act on behalf of the merchant, because the merchant is the one who chooses to use the app in their store.
2. Information we collect
2.1 Merchant and store information (received from Shopify)
Store details: the store's myshopify.com domain and the basic store details Shopify shares with apps when they are installed. Shopify lets the app read the store owner's name, email address, phone number and address. We use these details only to provide the app and to contact you about support or important changes.
Access credentials: the access and refresh tokens Shopify gives the app when it is installed and when they are renewed, with their permissions and expiry dates. They are stored encrypted.
Your app configuration: the announcements you create (texts, coupon codes, links, icons, design, schedules, translations, and the pages, products, collections and countries you choose for them). The app publishes this configuration to your store's app data in Shopify so the bar can show it.
Images: icons or images you upload in the app go directly to your store's Shopify Files.
Technical records: application logs with errors and diagnostic messages, which can contain your store domain and internal IDs. The hosting servers may also keep standard request logs (for example IP address, date and time, and the address requested) for security and troubleshooting.
2.2 Store staff
Staff open the app inside the Shopify admin, which signs them in with Shopify session tokens. The app stores a store-level access token and does not need the names or email addresses of the staff who use it. The app's pages may use cookies that are needed to keep the app working securely.
2.3 Shoppers (the store's customers)
Announcement statistics. To show you how your announcements perform, the bar counts these events: an announcement was shown, its button or link was clicked, it was closed, or its coupon code was copied. For each event it sends only a random event ID (created for that event, so it can be counted once), the announcement ID and the event type. It sends them to the app through the store's own address (/apps/bogox/analytics/events). Shopify forwards these requests to our server and adds the store domain and, if the shopper is logged in, their customer account ID. The app does not use or store that customer account ID, and the bar does not create or keep any identifier for the shopper, so the statistics cannot be linked to a person. We use these events only to count them for your statistics. Events are not counted in the theme editor.
Data kept in the shopper's browser. When a shopper closes an announcement, the bar saves this in the browser's session storage ("bogox-dismissed:" followed by the announcement ID) so the same announcement stays closed while the browser tab is open. It is deleted when the tab is closed and is not sent to us.
Country and page targeting. To decide whether to show an announcement, the bar uses the page type and the country that Shopify has already set for the visit. This happens in the shopper's browser; the country is not sent to us. The app does not use any separate geolocation service.
The bar does not change the shopper's cart, does not ask shoppers for names, email addresses, phone numbers, postal addresses or payment details, and does not load third-party tracking.
2.4 Shopify permissions the app requests
The app asks Shopify for these permissions:
view and edit the online store's theme and the page content on the app's own path (/apps/bogox), to show the bar and receive its statistics;
view products and collections, so you can choose where each announcement appears;
view and edit files, to upload the icons and images you choose.
3. How we use the information
To install the app and keep it working in your store: authenticating requests, saving your announcements and publishing them to your store.
To show announcements to shoppers on the right pages, in the right countries, languages and dates.
To calculate statistics for your announcements (views, clicks, closes and coupon copies).
To keep the service secure, find errors and give you support.
To contact you, when needed, about support or important changes to this policy.
We do not sell personal information and we do not use it for advertising or profiling. The app itself does not send marketing emails to merchants or shoppers.
4. Legal basis and consent
We process merchant and store information because it is needed to provide the app you installed, and because of our legitimate interest in keeping the service secure and working. Shopper information is processed on the merchant's behalf. The announcement statistics contain no shopper identifier and the session-storage entry is needed for the close button to work. The merchant is responsible for informing shoppers in the store's own privacy policy and for collecting any consent their law requires.
5. Sharing and service providers
Shopify: the app runs inside Shopify and exchanges data with it through Shopify's APIs, webhooks and theme app extension. Shopify's privacy policy applies to the data Shopify holds.
Hosting: the app's servers and database are run by our hosting provider, which processes this information only to host the app for us.
The bar that shoppers see does not use third-party analytics or advertising services. We do not sell your information or share it with anyone else unless the law requires it.
6. Storage and security
Information is stored in the app's database on our hosting provider's servers, which may be located in a country other than yours. Connections to the app use HTTPS. Requests from the app's admin pages are authenticated with Shopify session tokens, and Shopify signs the storefront requests it forwards to the app so they can be verified. Access tokens are stored encrypted. No system is completely secure, and we aim to keep only the information the app needs.
7. Retention and deletion
While the app is installed: your store details, announcements and statistics are kept so the app can work. When you delete an announcement in the app, it stops showing in your store. Application logs are kept only for as long as they are needed to troubleshoot and secure the app, and are then deleted; they are not kept indefinitely. You can ask us to delete the entries about your store at any time.
When you uninstall the app: Shopify revokes the app's access, so the stored access tokens stop working.
48 hours after uninstalling (Shopify's shop/redact request): the app deletes the store's announcements and statistics. You can ask us to delete any remaining information about your store sooner by writing to [email protected].
Shopper requests (customers/redact and customers/data_request): the app receives these requests from Shopify. Because it keeps no shopper profiles, contact details or addresses, and its statistics contain no shopper identifier, there is normally no shopper data to delete or export.
In the shopper's browser: the session-storage entry described in section 2.3 is deleted when the browser tab is closed.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to or restrict its use. Merchants can exercise these rights by writing to [email protected]. Shoppers should contact the store they bought from first; the store can forward the request to us through Shopify. You can also complain to your local data protection authority.
9. Children
The app is meant for businesses and is not directed to children.
10. Changes to this policy
We may update this policy when the app or the law changes. The date at the top shows the latest version. If a change is important, we will tell merchants in the app or by email.
11. Contact
For questions about this policy or your information, write to [email protected].