Privacy Policy for Shopify Apps

Pocium (“Pocium”, “we”, “us”, or “our”) is a Danish company that develops apps for the Shopify platform. This Privacy Policy describes how your personal information is collected, used, and shared when you install or use any of our Shopify apps (collectively, the “Apps”) in connection with your Shopify-supported store.

Information We Collect

When you install one of our Apps, we are automatically able to access certain types of information from your Shopify account. The specific data we access depends on which App you install, but may include:

Store information: Your store name, domain, Shopify plan, and store timezone
Merchant information: Shop owner name and email address as provided by the Shopify API
App-specific data: Data related to the specific functionality of the App (e.g., URL redirects, 404 logs, product data) as described in each App’s listing
Usage data: Information about how you interact with our Apps, including features used and actions taken

We only request the minimum Shopify API scopes required for each App to function. We do not access data beyond what is necessary to provide our services.

How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain our Apps
Improve and develop new features for our Apps
Communicate with you about your account, support requests, or updates to our Apps
Monitor usage patterns to improve performance and user experience
Comply with applicable laws and Shopify’s requirements

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

Shopify: Our Apps operate within the Shopify platform and share necessary data with Shopify in accordance with their API terms
Service providers: We use trusted third-party providers for hosting and infrastructure necessary to operate our Apps. These providers are contractually obligated to protect your data
Legal requirements: We may disclose your information if required by law, regulation, or legal process

Data Retention

We retain your personal information for as long as your App is installed on your store and as needed to provide our services to you. When you uninstall an App, we will delete your store data within 30 days, unless we are required to retain it for legal or regulatory purposes.

Aggregated, anonymized data that cannot identify you may be retained for analytical purposes.

As a Danish company, we comply with the General Data Protection Regulation (GDPR) and the Danish Data Protection Act. If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you
Right to rectification: You can request correction of inaccurate personal data
Right to erasure: You can request deletion of your personal data
Right to data portability: You can request your data in a structured, machine-readable format
Right to object: You can object to processing based on legitimate interests
Right to restrict processing: You can request that we limit how we use your data

To exercise any of these rights, please contact us using the details below.

CCPA Compliance

If you are a California resident, you have the right to know what personal data we collect, request deletion of your data, and opt out of any sale of personal data. We do not sell personal information. To exercise your rights, contact us at the email address below.

Customer Data

Our Apps may process data belonging to your customers (end users of your Shopify store) only as necessary to provide the App’s functionality. In such cases, you remain the data controller for your customers’ data, and we act as a data processor on your behalf. We do not use your customers’ data for any purpose other than providing the services of the App.

Security

We implement appropriate technical and organizational security measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by updating the date at the top of this page.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Pocium ApS

Address: Østre Alle 102, DK-9000 Aalborg
CVR: 37393487
Email: [email protected]
Phone: +45 25 94 28 06