Privacy Policy
This Privacy Policy explains how Ticart: Limited Cart Offers (the “App”), operated by Heysenior (“we”, “us”, or “our”), collects, uses, stores, and discloses information when a Shopify merchant installs or uses the App and when visitors interact with App functionality on a merchant’s online store.
1. Information we process
We process information only as needed to provide, secure, maintain, and improve the App, including:
- Merchant and store information: Shopify store domain, installation/session information, App configuration, campaign settings, translations, discount configuration, subscription/billing status, and related technical records.
- Order and conversion information: Shopify order identifiers, order totals, subtotal, discounts, shipping, taxes, currency, purchased item information needed for campaign reporting, conversion time, and campaign/variant attribution.
- Storefront analytics information: pseudonymous visitor and session identifiers, a cryptographic hash derived from an IP address, country and language when available, user-agent information, page path, referrer, campaign interactions, offer views, claims, expirations, checkout events, and A/B test assignment information.
- Technical information: request metadata and information reasonably necessary to diagnose errors, protect the App, and operate its services.
The App is designed to minimize the personal information it retains. For example, it does not retain
complete orders/paid webhook payloads for conversion analytics, and buyer-facing order labels
and temporary attribution tokens are removed after they are no longer needed for attribution.
2. Protected customer data
Certain Shopify order information and identifiers may constitute protected customer data under Shopify’s requirements. The App uses this information to attribute paid orders to limited-time offer campaigns, calculate campaign performance, prevent duplicate conversion records, and respond to applicable privacy requests.
The App does not require customer name, email address, phone number, or postal address for its core limited-offer analytics and does not intentionally retain those fields in its conversion analytics records.
3. How we use information
We use information to:
- provide and operate limited-time offer campaigns and discounts;
- display campaign analytics and conversion reporting to merchants;
- support A/B testing and campaign attribution;
- manage App access and subscription status;
- maintain security, prevent abuse, troubleshoot problems, and improve reliability;
- comply with legal obligations and Shopify privacy requirements; and
- process data access and deletion requests.
We do not use customer information for unrelated purposes.
4. Analytics and storefront interactions
The App records interactions with its limited-time offer widget so merchants can understand campaign performance. These records can include offer visibility, claims, expirations, checkout progression, conversion attribution, page context, pseudonymous visitor/session identifiers, and A/B test assignments.
Merchants are responsible for configuring their storefront privacy and consent experience as required by applicable law. We process privacy signals and requests that apply to the App where required by Shopify and applicable law.
5. How information is shared
We do not sell personal information. We may disclose information to service providers that process data on our behalf when necessary to host, secure, maintain, or support the App, subject to appropriate contractual and confidentiality obligations. We may also disclose information when required by law, legal process, or to protect rights, safety, and security.
6. Data retention
Visitor-linked limited-offer analytics data is retained for up to 365 days to provide historical campaign reporting and is then scheduled for deletion. Encrypted payloads created in response to a Shopify customer data request are retained for up to 30 days, after which the payload is removed while non-identifying processing/audit information may be retained as necessary to document compliance.
Other merchant configuration, campaign, subscription, and operational records are retained while reasonably necessary to provide the App, meet legal or contractual obligations, resolve disputes, or maintain legitimate business records. Shop data subject to Shopify’s mandatory shop-redaction process is deleted in accordance with that process.
7. Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. Sensitive privacy-export payloads are encrypted by the application before storage, IP addresses used for analytics are transformed using a keyed cryptographic hash rather than stored in raw form, and data transmitted to the App is protected using HTTPS/TLS.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Privacy requests and deletion
The App supports Shopify’s mandatory privacy webhooks for customer data requests, customer redaction, and shop redaction. Depending on the request, we can provide applicable App-held data or permanently delete customer-linked or shop-owned records as required.
Customers who wish to exercise privacy rights regarding a Shopify store should generally contact the merchant from whom they purchased or whose store they visited. Merchants may contact us through the support contact provided on the App’s Shopify App Store listing for requests concerning information processed by the App.
9. International processing
Information may be processed in jurisdictions other than the country where a merchant or customer is located. Where required, we use appropriate safeguards for international transfers and require service providers to protect information in accordance with applicable data-protection requirements.
10. Children’s privacy
The App is a business tool for Shopify merchants and is not directed to children. We do not knowingly collect personal information from children for our own independent purposes through the App.
11. Changes to this policy
We may update this Privacy Policy to reflect changes to the App, our practices, legal requirements, or Shopify requirements. The “Last updated” date at the top of this page indicates when this policy was most recently revised.
12. Contact
Ticart: Limited Cart Offers is operated by Heysenior.
For questions, requests, or concerns regarding this Privacy Policy or the processing of personal information by the App, please contact us at:
Email: [email protected]
Merchants may also contact us using the support channels provided on the App’s Shopify App Store listing.