Privacy policy

Information we process and why

Store connection and account information

Shopify store domains, store and installation identifiers, locale, timezone, session information and access credentials connect the correct store and authorize administration. Shopify may also supply staff account identifiers, names, email addresses, locale and account-role information.

Offer and catalog information

Product, variant and collection references, prices, inventory, markets and languages from Shopify are used with merchant-provided offer names, translations, product choices, quantities and pricing rules to build, check and maintain bundle offers.

Shopping selections and cart information

Selected products, quantities, offer and selection references, language, country and currency context help prepare bundle cart items and apply the offer's rules. Mixvero can retain a selected composition and its instance identifier when first allocating a published bundle composition.

After an offer is added, the theme block can send Shopify's cart response to Mixvero for comparison. This can include other cart items, a cart token, notes, attributes and custom line-item properties, including information entered into those fields. The normal cart-comparison path processes that response without saving the raw cart response.

App plan information

Plan and subscription references, billing status, interval, trial and billing period information from Shopify determine app entitlements and reconcile billing changes.

Privacy-request information

Shopify privacy notifications can include a customer identifier, email or phone number, relevant order references and request identifiers. These details are recorded for review and handling of the store's access and deletion requests.

Operational and test records

Operation references, timestamps, error categories, configuration snapshots, Shopify resource references and audit records help check transactions, investigate failures and reconcile resources. Controlled release tests can also involve test carts, checkouts, orders and related verification evidence.

Merchant-entered values can themselves contain personal information. Hashes and opaque references in retained records may still be linkable to a store or person.

Browser storage

The theme block uses browser session storage to restore an offer selection in the current browsing session. It saves offer, product and quantity references, configuration checks and country/currency context. Mixvero does not assign this record a time-based expiry.

The block removes saved selections in situations such as beginning an add to cart or rejecting a stale selection; a failed add can save the selection again. Clearing the site's session storage removes that browser copy. Shopify and the store's other components have their own storage practices.

Processing and access

Mixvero exchanges store configuration, offer resources, cart operations, subscription information and privacy notifications with Shopify to provide the service. Application records are stored in PostgreSQL on an Oracle Cloud host. Controlled operational tests can use a browser service and separate evidence files.

Authorized privacy review and export operations can produce separate files for review and delivery. Removing records from the application database does not remove copies in those files or records held by Shopify or another service.

Retention, uninstall and deletion

Uninstalling Mixvero removes its local Shopify sessions and begins resource cleanup and installation-lifecycle handling. It does not immediately erase every application record or every Shopify resource.

When store-level erasure completes, it deletes or clears selected local data, including sessions, drafts, customer privacy-request payloads and primary store-profile fields. Some published offer versions, catalog and store references, selected bundle compositions, operation references, publication evidence, audit records and erasure records remain. Store identity hashes and opaque references are also retained for reinstall and erasure checks; these records are not automatically anonymous.

Backups, exported files, logs and records held by other services require separate retention and deletion handling. They are not removed simply by uninstalling the app.

Privacy requests

If you shop at a store using Mixvero, contact that store about information associated with your shopping. Shopify can forward customer access and deletion notifications to Mixvero on the store's behalf. Receiving a notification is separate from completing the relevant review, response or deletion.

For questions about Mixvero's processing, contact CloudLu at [email protected]. Include the store domain and a description of your request. Do not send passwords, access tokens or full payment details.

Security

Relevant app operations use Shopify authentication, store-scoped authorization and verification of Shopify webhook signatures. Stored customer privacy-request payloads and selected test-cart identifiers use authenticated encryption. Privacy review and export require authorized access; exported information also needs protection outside the application database.