Privacy policy

Effective date: September 5, 2026

Last updated: October 26, 2026

This Privacy Policy explains how Backtrack Apps (“we”, “us”) collects, uses, and protects information when a merchant installs and uses the AndOr Checkout Rules application (the “App”) on their Shopify store.

By installing the App you agree to this Policy. If you do not agree, please do not install or use the App.

1. Who we are

Backtrack Apps is the developer of the App. For data relating to your store, your staff and your orders that we process to operate the App, we act as a data processor / service provider on behalf of you, the merchant (the data controller for your store). For the limited account information we hold to manage your relationship with us, we act as a controller.

Contact: estiak@backtrackhq.com

2. Scope

This Policy covers the App only. It does not cover Shopify’s own processing of your data (see Shopify’s privacy policy) or any third-party services you connect outside the App.

3. Information we collect and store

We collect the minimum needed to run the App. Specifically:

Store information

Store domain and .myshopify.com domain
Store name, currency, timezone, tax configuration
Plan information and subscription status
Granted API scopes and install / uninstall state
Store owner name and store contact email
Store billing address (street, city, country, postal code, phone, company) as provided by Shopify

App user (staff) information

For the Shopify staff who open and use the App in the admin:

Shopify user ID
Name and email address
Role indicators (account owner, collaborator) and locale
First-seen and last-seen timestamps (to operate and support the App)

Configuration you create

The payment, delivery, validation, and discount rules you build, including their conditions and settings, and a version history of those rules. These describe logic (for example, “hide cash on delivery when the cart total is over $100”) and do not contain buyer personal data.
Your upsell offers, storefront display settings, and any storefront text you write.

Order data

The App reads some data about your store’s orders for two purposes: to count your store’s orders each month for your plan’s order limit, and to show you how your AndOr offers and discounts perform.

We read only these kinds of order data:

Order identifiers and dates (created, updated, cancelled), and whether it is a test order
Currencies and order totals
For each line: quantity, product identifier, price and discounts
Discounts applied to the order and to shipping (type, value, title or code)
A marker on cart lines added through AndOr, so we can tell which lines came from an AndOr offer
The product cost you set in Shopify, so we can show profit

We never read the customer’s name, email, phone number or address. We request only the data above from Shopify.

Every order adds one to your store’s monthly order count. For an order without an AndOr offer or discount, we keep nothing about the order itself, only the monthly count. A short technical record that prevents counting the same order twice is deleted within days.

For orders with an AndOr offer or discount, we store the order identifier, dates, currencies, totals, and the quantities and amounts that belong to your AndOr offers and discounts. From these we build daily totals per offer, which contain no order identifiers.

Storefront offer events

When your store shows AndOr offers, a small script on your storefront sends us anonymous events, so you can see how your offers perform. An event says that an offer was viewed, clicked or added to the cart, and where on the page it appeared. An “added” event can also include the added value, the products and quantities added, and the shopper’s currency.

Events contain no name, email, customer ID or other identifier of the shopper.
Events respect Shopify’s customer privacy consent. The script sends nothing, and stores nothing in the browser, unless Shopify reports that the shopper allows analytics. If the shopper has not answered yet, nothing is sent.
With consent, the script keeps a small temporary record in the browser, cleared when the tab closes, so the same view is not counted twice. It sets no cookies.
The shopper’s IP address reaches our servers, as with any web request. We use it only briefly, to protect the service from abuse, and we do not store it.
We store only counts per offer per day. Short-lived technical values used to prevent double counting are deleted automatically within days.

Storefront error reports

If AndOr’s storefront scripts hit an error, we may receive an anonymous error report (the error and where it happened, the theme name and the type of page) with no personal data, identifiers or cookies, used only to fix bugs.

Authentication and operational data

Shopify access tokens and session data, stored securely to keep the App connected to your store.
Files you generate with the App’s export feature. These contain rule configurations, not buyer data.

Technical and log data

Operational logs and request metadata (for example IP address, timestamps, and error details) generated when the App runs, used to secure, debug, and operate the service. We do not use this data for advertising or profiling.

Cookies and similar technologies

The App uses essential cookies and session tokens needed to authenticate you and keep the App working inside the Shopify admin.
The App also uses first-party analytics storage (cookies and browser storage) from our analytics provider PostHog, and cookies from our support chat provider Crisp so chat conversations stay continuous. These identify your store and staff session inside the App only; they do not track you across other websites.
On your storefront, the offer events script uses only temporary browser storage that clears when the tab closes, and only with the shopper’s analytics consent (see above).
We do not use advertising cookies or cross-site tracking.

What we do NOT collect

We do not collect or store your customers’ (buyers’) personal data: no names, emails, phone numbers or addresses. The order data above is limited to identifiers, dates, money and quantities.
The App’s checkout functions evaluate cart, customer, and delivery attributes transiently within Shopify’s checkout to decide whether a rule applies, and return only a result. That buyer data is not sent to, or stored by, us.
We do not process payments or see payment details. Billing is handled entirely by Shopify’s billing system.

4. How we use information

We use the information above to:

Provide, operate, and maintain the App and its features
Authenticate the App with your store and keep it in sync
Show you statistics about your own offers and discounts (orders, revenue, views, clicks and adds)
Apply your plan’s limits, including the monthly number of store orders used for billing and the number of offer events
Provide support and respond to your requests
Send essential service and account communications
Diagnose problems, maintain security, and prevent abuse
Understand aggregate feature usage to improve the App
Comply with legal obligations

Order data and storefront events are used only for your own offer and discount statistics and plan limits. We do not use them for marketing, advertising or profiling, and we make no automated decisions about shoppers.

We do not sell or share your personal information or your order data, and we do not use it for third-party advertising.

Where the GDPR or UK GDPR applies, we rely on:

Performance of a contract: to provide the App you installed
Legitimate interests: to secure, support, and improve the App, and to communicate about service-essential matters
Legal obligation: to comply with applicable law, including Shopify’s mandatory data-protection requests

For your store’s data, including order data, you are the controller and we process it on your documented instructions as your processor / service provider.

6. Sub-processors and hosting

To run the App we rely on the following service providers (sub-processors). None of them receive your customers’ (buyers’) personal data.

Cloudflare, Inc.: application hosting and the infrastructure where App data is processed and stored, including order data and storefront events.
Shopify: the platform the App extends and the source of the store, staff and order data described above.
Crisp IM SAS: in-App support chat. Receives staff name, email address, store domain, plan, and the messages you send us in chat.
PostHog, Inc.: product analytics and session replay. Receives store domain, plan information, in-App page views, and feature-usage events (for example “rule created”). Session replays mask what you type into input fields, except a few non-sensitive App fields (such as rule names and in-App search) that help us improve the App. Discount codes always stay masked.
Functional Software, Inc. (Sentry): error monitoring. Receives store domain, technical error details, and the anonymous storefront error reports described above.
Google LLC (Google Analytics): measures visits to our Shopify App Store listing, via Shopify’s listing tracking. Not used inside the App itself.
Slack Technologies, LLC: delivers internal operational alerts to our own team (for example install and uninstall notifications). Receives store domain, plan, and store contact email.

Order data is never sent to PostHog, Sentry, Crisp, Google or Slack. We use analytics and error data only to operate and improve the App, never for advertising or profiling. An up-to-date list of sub-processors is available on request.

7. Data retention and deletion

We retain store, staff, and configuration data for as long as the App is installed, so the App can function.
Order data: records of orders with an AndOr offer or discount are kept for 90 days, then deleted automatically. Daily totals per offer and monthly order counts contain no order identifiers and are kept while the App is installed.
Failed background jobs: when a background job fails every retry, we keep a short record for 30 days so we can investigate: the store address, the job type and, for an order job, the order number. No order contents and no customer details.
Storefront events: we keep only daily counts per offer. Technical values used to prevent double counting are deleted within days.
When you uninstall the App, your access tokens and sessions are deleted. We may keep store, configuration and order data briefly to support reinstallation; it is deleted on your request or when we receive Shopify’s store data deletion request (below).
We honor Shopify’s mandatory privacy (GDPR) requests:
- Store data deletion (sent by Shopify about 48 hours after uninstall): we delete staff details, store contact and billing details, sessions, feature requests sent from the App, your offers, storefront settings and texts, and all order data, daily totals and usage counts for the store. We keep only a basic install record and your rule configurations (neither contains personal data), so the App works if you reinstall. Ask us and we will delete those too.
- Customer data deletion: we delete our records of the orders Shopify lists in the request.
- Customer data request: we hold no customer personal data (no names, emails, phone numbers or addresses), so there is none to return; we acknowledge these requests accordingly.
You may also request deletion at any time by contacting estiak@backtrackhq.com.

8. Your rights

Depending on your location (for example under GDPR / UK GDPR or the CCPA/CPRA), you may have rights to access, correct, delete, restrict, or port your personal information, and to object to certain processing. To exercise these rights, contact estiak@backtrackhq.com. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

We never sell or share personal information or order data, so there is nothing to opt out of.

9. Security

We protect information with industry-standard measures, including:

Encryption in transit for data sent between Shopify, your storefront and the App
Encryption at rest for the data we store
Access to production systems limited to authorized personnel
Secure storage of access tokens
Monitoring, and prompt fixes when we find a vulnerability

No method of transmission or storage is completely secure, but we work to protect your information and to address vulnerabilities promptly.

10. International transfers

Our hosting infrastructure operates globally, so information may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

11. Children

The App is a business tool for merchants and is not directed to children. We do not knowingly collect personal information from children.

12. Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.

13. Contact

Questions about this Policy or your data:

Backtrack Apps estiak@backtrackhq.com