Privacy policy

Last updated: November 9, 2026

Plainstack is a Shopify app that lets merchants run volume discounts and Buy X Get Y offers. This policy explains what data the app stores, why, and how it is deleted. It applies to merchants who install the app and to shoppers who visit stores that use it.

Data we store

• Your shop domain (for example your-store.myshopify.com), to know which store the data belongs to.
• An access token from Shopify and the permissions you granted, so the app can manage its discounts in your store. It is stored on our server and never shown to anyone.
• Your offer settings: offer names, type, tiers, selected product and collection IDs, schedule, status and combination settings. The same settings are also saved in your Shopify store, on the discounts the app creates.
• Your plan (Free or Pro), as reported by Shopify. Payments are handled by Shopify; we never see card or bank details.
• Technical logs kept by our hosting provider, such as IP address and request time, used only for security and troubleshooting.

Data we do not store

• We do not collect or store personal data of your customers: no names, emails, addresses, phone numbers or orders.
• We do not store names or email addresses of you or your staff.
• Discounts are calculated by Shopify at checkout. Cart contents are not sent to our servers.
• The product page block reads offer settings from your store. It sets no cookies, does no tracking and does not send shopper data to us.

Shopify permissions

• write_discounts: create, update, pause and delete the automatic discounts that power your offers.
• read_products: let you pick products and collections and show their names in the app.

The app does not request access to orders or customers.

Sharing

We do not sell or rent data, and we do not share it with advertisers. Data is processed only by Shopify and by our hosting provider (Hetzner Online GmbH) to run the app.

Deletion

• When you uninstall the app, we delete your access token right away.
• About 48 hours after uninstall, Shopify sends us a shop/redact request and we delete all remaining data for your store.
• Shopify customer data requests (customers/data_request, customers/redact) are answered, but there is no customer data to return or delete.
• You can ask us to delete your data earlier by emailing us from the store owner's address.
• Nightly database backups are kept for up to 30 days; data deleted from the app leaves the backups within 30 days.

Security

All traffic to the app uses HTTPS. Access to our database is limited to the app and its developer.

Changes

If this policy changes, we update this page and the date at the top.

Contact

Questions or requests about your data: support@plainstackapps.com.