Introduction
WD: Customer Insights & Growth is a Shopify app that records when customers log in to a merchant's storefront, and helps the merchant search, export and reward those customers. This Privacy Policy outlines how we collect, use, store, and protect data when merchants use our App.
Information We Collect
The App exists to show merchants who their customers are and when they log in, so it necessarily handles customer details. We collect:
- Login events — the time of each storefront login, the shopper's IP address and browser user agent, and the browser, operating system and device type derived from it.
- Customer profiles from Shopify — name, email address, phone number, addresses, tags, account and marketing-consent state, order count and amount spent, kept in sync with your store so the customer list stays current.
- Discount records — the title, code, value and dates of each discount created through the App, the customers it is restricted to, and how often it has been used.
- Store details — your shop name, contact email, phone number, address and URLs, plus your settings and subscription.
We do not collect or store payment card details.
How We Use the Information
We use the data we collect for the purpose of:
- Showing the customer list, login timeline and customer details inside the App
- Building the CSV exports you request
- Creating the discount codes you request in your Shopify store
- Counting customers against your plan's limit and emailing you as you approach it
- Providing support when you contact us
We do not sell, rent, or share merchant or customer data with any third party, and we do not use it to build advertising profiles.
Consent and Login Tracking
The App's theme embed checks Shopify's Customer Privacy API before recording anything. If a shopper has not allowed analytics, or the API is unavailable, no login is recorded. IP addresses are stored with each login but are not displayed in the App.
Data Security
Data is transmitted over HTTPS, and we employ industry-standard security measures to protect it from unauthorized access. We do not write customer personal data to our logs.
Data Retention & Deletion
- Login history is kept for 24 months and then deleted automatically.
- When a customer is deleted in Shopify, or Shopify sends us a customer redaction request, we permanently delete that customer's profile, login history and discount links, keeping only an identifier so the customer is not re-created.
- When you uninstall the App, login tracking stops immediately. Shopify sends us a store redaction request 48 hours later, and we then permanently delete every customer, login and discount record held for your store. We keep your store's contact details (shop name, email and address) for account and support records.
- Discount codes the App created remain in your Shopify store, under Shopify's own retention and your control.
- Emails we send you, including customer data reports, are kept by our email service for up to 90 days.
Retention may be longer if required by law or to establish or defend legal claims.
Customer Data Requests
When Shopify forwards a data request from one of your customers, we email you a report of everything the App stores about that customer, so you can respond to them.
Your Responsibilities
As a merchant, you are responsible for:
- Telling your customers, in your own privacy policy, that their storefront logins are recorded
- Keeping your store's cookie and consent banner configured so shoppers' choices reach the App
- Deciding who receives exported CSV files, and keeping those files secure
- Controlling who has access to your Shopify admin and the App's settings
Changes to This Policy
We may update this Privacy Policy occasionally. Any changes will be reflected with an updated date at the top. Continued use of the App after changes constitutes your acceptance.
Contact Us
If you have questions or concerns about this Privacy Policy, contact us at: