Privacy Policy
Switch and Save Smart Cart (the "App") is provided by MageBytes ("we", "us", "our"). This Privacy Policy describes how we collect, use and share information when a merchant installs and uses the App in connection with their Shopify store, and when shoppers interact with the App on that store.
1. Information we collect
When you install the App, we automatically access certain information from your Shopify account:
- Store information: your shop domain, store name and the access token Shopify issues to the App.
- Product data: product titles, IDs, SKUs, prices, categories, vendors/brands, images and availability, used to build swap groups and suggest alternatives.
- App configuration: swap groups, price rules and settings you create in the App.
- Billing status: your selected plan and subscription status, provided by Shopify Billing.
When shoppers use the swap widget on your storefront, we record limited usage events:
- Event type (impression, offer shown, accepted, declined), the original and suggested product IDs, price difference and quantity.
- A cart token to group events from the same cart session.
We do not collect shopper names, email addresses, phone numbers, postal addresses or payment information. We do not access your orders or customer records.
2. How we use information
- To provide the App's core functionality: showing product alternatives in the cart and swapping cart items.
- To show analytics on your dashboard (impressions, offers, acceptance rate, revenue impact).
- To enforce plan limits and manage billing through Shopify.
- To provide support, troubleshoot issues and improve the App.
3. Sharing your information
We do not sell or rent your information. We share it only with service providers needed to operate the App (such as our hosting and database providers), with Shopify as required by its platform, or when required by law.
4. Data retention and deletion
We keep your data while the App is installed. When you uninstall the App, Shopify sends us a shop redaction request and we permanently delete your store's swap groups, settings and event logs. We also respond to Shopify's mandatory GDPR webhooks (customer data request, customer redact and shop redact).
5. Security
Data is transmitted over HTTPS and stored on secured servers with restricted access. No method of transmission or storage is completely secure, but we use reasonable measures to protect your data.
6. Your rights
If you are in the European Economic Area, the United Kingdom or another region with data protection laws, you have the right to access, correct, export or delete personal information we hold about you. To exercise these rights, contact us at support@magebytes.com.
7. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. The "Last updated" date above shows when it was last revised.
8. Contact us
For questions about this Privacy Policy or your data, email us at support@magebytes.com.