Privacy Policy

Last Updated: October 1, 2026

Smart Promo Rescue ("the App", "we", "our") provides automated invalid discount code detection, typo auto-correction, and shopping cart threshold recovery solutions for Shopify merchants. We are strictly committed to safeguarding merchant business data and customer privacy.

1. Overview and Scope

This Privacy Policy explains how information is handled when merchants install and use Smart Promo Rescue via the Shopify App Store. We adhere strictly to Shopify's Partner Code of Conduct and international privacy regulations, including the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

2. Information We Collect

Upon installation and during standard operation, the App accesses minimal and non-sensitive operational information via Shopify's authorized GraphQL and Admin REST APIs:

• Store Configurations: Store permanent domain (myshopify.com), primary currency, timezone, and public discount configuration metadata (promotional titles, minimum purchase subtotal criteria, validity periods).
• Cart Interaction Data: Cart subtotal, currency, and attempted discount code strings entered by shoppers.
• Anonymized Request Signatures: To prevent brute-force discount guessing and bot scraping, client IP addresses are processed into one-way cryptographic SHA-256 hashes combined with dynamic salt (SHA-256(IP + Salt)). We never store raw, readable IP addresses.

3. How Information is Used

We process collected operational data solely for the following business purposes:

• Performing millisecond-level fuzzy matching to suggest typo corrections for misspelled influencer codes.
• Calculating threshold gap differences between cart totals and minimum order spending rules.
• Aggregating ROI analytics (Rescued GMV and recovered order counts) displayed exclusively within your Shopify admin dashboard.

4. Mandatory GDPR & CCPA Compliance

We fully support Shopify's mandatory data compliance Webhook architecture:

• Customer Data Request (customers/data_request): Upon verified merchant request, we retrieve and export all logged customer interactions associated with that shopper.
• Customer Data Erasure (customers/redact): We permanently purge any stored customer event records within 48 hours of request receipt.
• Shop Data Erasure (shop/redact): Following an app uninstallation, all store data, settings, and historical cache entries are completely and irreversibly erased from our databases within 48 hours.

5. Data Security and Infrastructure

All data in transit is encrypted using industry-standard TLS 1.3 protocols. Data at rest is secured within enterprise-grade cloud facilities with automated backups and strict role-based access control (RBAC).

6. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your data privacy rights, please contact our data protection team:

Email: support@tongzhuo.chat

Website: https://tongzhuo.chat