Privacy Policy — Gift with Purchase

Last updated: August 24, 2026

Gift with Purchase (“the App”) provides tiered gift-with-purchase campaigns (free shipping and free gifts based on cart value) for Shopify stores. This policy explains what data the App processes when a merchant installs it.

Information we collect

When you install the App, we store the information needed to operate it for your store: your store’s myshopify domain and the API access token issued by Shopify (session data). Campaign configuration (tiers, gift products, texts, colors) is stored inside your own Shopify store as metafields — not on our servers.

The App does not collect, store, or process any personal data of your customers. Cart contents are read in the customer’s browser only, to display the progress bar and gift picker, and are never sent to our servers.

How we use information

Session data is used solely to authenticate API requests between your store and the App (creating and updating the automatic discounts and metafields that power your campaigns). We do not sell, rent, or share any data with third parties.

Data retention and deletion

When you uninstall the App, Shopify revokes its access token. Upon receiving Shopify’s shop redaction request (48 hours after uninstall), we permanently delete all session data related to your store. Campaign metafields stored in your shop are removed by Shopify together with the app data. You can also request deletion at any time by contacting us.

GDPR & compliance webhooks

The App implements Shopify’s mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). Because the App stores no customer personal data, customer data requests and redactions require no action; shop redaction deletes the store’s session data as described above.

Contact

For any privacy question or request, contact us at ormexadev@gmail.com.