Privacy Policy

For the purposes of applicable personal data protection laws, the data controller is:

Giuseppe Celentano
VAT ID: IT03096870641
Contrada Ponteromito 65
83040 Montemarano (AV), Italy
Email: info@octopusdigitalagency.com

Octopus Digital Agency is a brand under which independent professionals operate. For the purposes of applicable personal data protection laws, the data controller is identified as the person listed above.

We process only the information reasonably necessary to provide, operate, secure, and improve the app.

Depending on the features used by the merchant, the app may process the following categories of data:

• Shop information: shop domain, shop name, shop settings, authentication data, and information required to operate the app.
• Discount and promotion data: discount rules, campaign names, coupon codes, promotion configuration, discount values, start and end dates, usage limits, and related merchant-created settings.
• Product and catalog data: product IDs, variant IDs, collection IDs, product titles, pricing information, compare-at prices, and other product data needed to configure or apply discounts.
• Customer-specific promotion data: customer email addresses and Shopify customer IDs, only when the merchant creates customer-specific promotion rules.
• Customer segment data: Shopify customer segment IDs or references, only when the merchant creates segment-based promotion rules.
• Technical and usage data: logs, timestamps, error messages, app events, synchronization status, and diagnostic information needed to operate, debug, secure, and improve the app.

The app does not collect or process payment card data.

When merchants use customer-specific promotion features, the app may process limited customer personal data, such as customer email addresses and Shopify customer IDs.

This data is used only to identify the relevant Shopify customer and configure discount eligibility rules inside Shopify.

We do not use customer data for marketing, profiling, advertising, resale, or any purpose unrelated to promotion configuration and app operation.

We process the minimum amount of customer data required to provide the requested feature.

We use the information processed by the app for the following purposes:

• to provide and operate the app;
• to authenticate merchants and connect the app to Shopify stores;
• to create, update, synchronize, and manage Shopify discounts and discount functions;
• to configure product, collection, customer, and segment-based discount eligibility;
• to validate merchant-created promotion rules and CSV imports;
• to troubleshoot errors, monitor synchronization status, and provide support;
• to protect the security and integrity of the app;
• to comply with applicable legal, regulatory, and Shopify platform requirements.

Where applicable data protection laws such as the GDPR apply, we process personal data on one or more of the following legal bases:

• performance of a contract with the merchant;
• legitimate interests in operating, securing, maintaining, and improving the app;
• compliance with legal obligations;
• consent, where consent is required by applicable law.

Promotion configuration and related references may be stored in the app database and/or in Shopify discount metafields so that merchants can manage, update, synchronize, and audit their discount rules.

Customer-specific promotion references are retained only for as long as needed to provide the app service, maintain active discount rules, comply with merchant instructions, resolve technical issues, or meet legitimate operational and legal requirements.

Merchants may delete or update promotion rules at any time from the app or from Shopify.

When a merchant uninstalls the app, app-related store data is deleted or anonymized according to Shopify requirements and applicable law, unless retention is required for legitimate legal, security, or accounting purposes.

We do not sell customer data.

We do not share customer data with advertisers, marketing platforms, data brokers, or unrelated third parties.

Data may be processed by service providers strictly necessary to operate the app, such as hosting, database, logging, infrastructure, monitoring, and security providers. These providers may process data only as needed to provide their services to us.

We may disclose information if required to comply with applicable law, legal process, regulatory obligations, Shopify platform requirements, or to protect the rights, property, and safety of our business, merchants, customers, or others.

We use reasonable technical and organizational safeguards to protect merchant and customer data, including encrypted transport, access controls, environment separation, restricted production access, and security-conscious development practices.

Access to personal data is limited to authorized personnel who need it to operate, support, maintain, or secure the app.

No method of transmission or storage is completely secure, but we take reasonable steps to reduce the risk of unauthorized access, disclosure, alteration, or loss.

Merchants are responsible for ensuring that their use of the app, including any customer-specific or segment-based promotion rules they create, complies with applicable privacy, consumer protection, marketing, and data protection laws.

Merchants are also responsible for providing any required notices to their customers and obtaining any required permissions or consents for the use of customer data in connection with promotions.

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, or object to the processing of their personal data, or to request portability of their personal data.

Because the app is used by Shopify merchants, customer requests relating to store customer data should generally be directed to the relevant merchant. Where required, we will assist merchants in responding to valid privacy requests.

Privacy-related requests can also be sent to us at info@octopusdigitalagency.com.

The app may use cookies or similar technologies that are necessary for authentication, security, session management, and app functionality.

The app does not use customer data for third-party advertising or behavioral advertising.

The app may rely on infrastructure and service providers necessary to operate the service, such as hosting, database, logging, monitoring, and security providers.

The app does not integrate with third-party advertising, tracking, or marketing services for the purpose of selling or monetizing customer data.

The app is intended for use by Shopify merchants and is not directed to children. We do not knowingly collect personal data from children through the app.

If the app or the business operating it is involved in a merger, acquisition, restructuring, sale of assets, or similar business transaction, information processed by the app may be transferred as part of that transaction, subject to this Privacy Policy and applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices, app features, legal requirements, or Shopify platform requirements.

Updates will be posted on this page with a revised �Last updated� date.