Privacy Policy

1. Introduction

Announcement Banner Studio (“we”, “us”, “our”, “the App”) is a Shopify application that allows merchants to create, manage, and display announcement banners on their online storefronts. This Privacy Policy explains how we collect, use, store, and protect information when you install and use our App.

2. Information We Collect

2.1 Information from Shopify APIs

• Shop domain and basic store information
• Authenticated session tokens for API access
• Theme information (to verify app embed status)
• Billing and subscription status (processed entirely through Shopify’s Billing API)

2.2 Information from Merchants

• Banner configuration data (text content, styling, scheduling, targeting rules, call-to-action settings)
• App preferences and settings
• Uploaded images for banner backgrounds

2.3 Information from Store Visitors

• Aggregated analytics only: Daily counts of banner impressions, clicks, and dismissals
• Analytics data is stored as aggregate daily totals per banner — we do not collect or store any personally identifiable information (PII) from store visitors
• No IP addresses, cookies, device identifiers, or browsing behavior is collected
• No individual user tracking of any kind

3. How We Use Your Data

• Display announcement banners on your storefront as configured
• Provide aggregated analytics to help you measure banner performance
• Process subscription payments through Shopify’s Billing API
• Sync banner configuration to your theme via Shopify metafields
• Enforce plan-based usage limits (e.g., monthly impression caps)

We do not use your data for advertising, profiling, or any purpose beyond providing the App’s core functionality.

4. Data Storage and Security

• All data is stored in a SQLite database on secure, encrypted infrastructure hosted on Fly.io
• Data is transmitted exclusively over HTTPS (TLS encryption in transit)
• The database resides on an encrypted persistent volume
• Access to infrastructure is restricted to authorized personnel only

5. Data Retention

• Active merchants: Data is retained for the duration of your App installation
• After uninstallation: All shop data (banners, settings, analytics, sessions) is permanently deleted within 48 hours via Shopify’s mandatory shop/redact webhook
• Analytics data: Retained as aggregated daily statistics for the duration of your installation; deleted upon uninstall

6. Data Sharing

We do not sell, rent, trade, or share your data with any third parties. Your data is used solely to provide the App’s functionality.

The only external services involved are:

• Shopify: For authentication, billing, theme integration, and metafield storage (governed by Shopify’s own privacy policy)
• Fly.io: Infrastructure hosting provider (data processing agreement in place)

7. GDPR Compliance

We comply with the General Data Protection Regulation (GDPR) and support the following data subject rights:

• Right to Access: Request a copy of all data we store about your shop by contacting us
• Right to Erasure: All data is automatically deleted upon app uninstallation. You may also request manual deletion at any time
• Right to Rectification: You can update your data at any time through the App’s interface
• Right to Portability: Contact us to request an export of your data
• Right to Restrict Processing: You can disable individual banners or the entire app embed at any time

We respond to all mandatory Shopify compliance webhooks:

• customers/data_request — We do not store customer PII; acknowledged with confirmation
• customers/redact — We do not store customer PII; acknowledged with confirmation
• shop/redact — All shop data is permanently deleted

8. Customer Data

Announcement Banner Studio does not access, collect, or store any protected customer data. We do not request access to customer information through Shopify’s APIs. The App only uses the read_themes and write_files access scopes, which do not include access to customer data.

9. Cookies and Tracking

The App does not set any cookies on your store visitors’ browsers. We do not use any tracking pixels, fingerprinting, or third-party analytics services. Banner interaction analytics are collected via anonymous, aggregated server-side counters only.

10. International Data Transfers

Our servers are located in the United States (Fly.io, IAD region). If you are located outside the United States, your data will be transferred to and processed in the United States. We rely on standard contractual clauses and appropriate safeguards for international data transfers as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of material changes through the App interface. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: bravikumar3020@gmail.com