Privacy Policy

• Shopify store details, including shop domain, installation state, and merchant context.
• Authentication and session data needed to keep the embedded app secure.
• App configuration, billing status, feature settings, and storefront setup details needed to run Koala Essentials.
• Operational analytics, including order-linked attribution data used to measure bundle performance and app activity.
• Support messages and the details needed to investigate merchant requests.

• To authenticate merchants and load the correct Shopify store account.
• To provide app configuration, storefront setup, analytics, and billing features.
• To troubleshoot installation, product setup, storefront display, and billing issues.
• To respond to support and privacy requests.
• To comply with Shopify data-deletion and customer redaction requirements.

Koala Essentials stores app data in the database configured for the deployed app environment. Merchant sessions use Shopify authentication and HTTPS transport.

• Production access is limited to the operators responsible for support and compliance.
• Backups follow the hosting platform's normal retention lifecycle and are used for disaster recovery.
• We do not sell merchant data.

• When a shop uninstalls the app, we remove active shop-owned app data and sessions from production systems.
• When Shopify sends a shop/redact request, we delete the remaining shop-owned data associated with that store.
• When Shopify sends a customers/redact request, we remove matching order-linked analytics records.
• When Shopify sends a customers/data_request request, we prepare a support response record with matching order-linked analytics so the request can be answered.

• We share data with Shopify as required to provide the app and follow platform rules.
• We use hosting providers as needed to run the app and database infrastructure.
• We may use service providers only when needed to operate the app, support merchants, or keep the service secure.
• We do not sell or rent merchant data.