Privacy Policy

Last updated: June 12, 2026

Rewarda ("we", "our", "us") is a Shopify application that provides loyalty and rewards functionality for Shopify merchants and their customers. This Privacy Policy explains how we collect, use, and protect information when you use our app.

1. Data We Collect

From merchants (store owners):

• Shopify store domain and access token (required to interact with the Shopify API)
• Loyalty program configuration (program name, points per euro, reward settings)
• Widget appearance preferences

From customers (end shoppers), via Shopify webhooks:

• Customer ID (Shopify's internal identifier)
• Customer email address
• Order amounts (used to calculate loyalty points earned)
• Points balance and transaction history

We do not collect payment card information, passwords, or any sensitive personal data beyond what is described above.

2. How We Use Your Data

• To operate the loyalty program (award points, process redemptions)
• To display points balance and rewards in the storefront widget
• To generate discount codes when customers redeem rewards
• To provide merchants with analytics about their loyalty program performance

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Data Storage and Security

Data is stored in a secured PostgreSQL database hosted on Railway (railway.app), located in the European Union. We apply industry-standard security measures including encrypted connections (TLS) and restricted access controls.

Access tokens are stored securely and used exclusively to make authorized API calls to the Shopify store they belong to.

4. Data Retention

• Merchant and customer data is retained for as long as the app is installed in the store.
• Upon app uninstallation, session data is removed immediately.
• All remaining store data (loyalty programs, transactions, customer points) is permanently deleted within 48 hours of uninstallation, in accordance with Shopify's data requirements.

5. Your Rights (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data
• Right to restriction — request that we limit how we use your data
• Right to data portability — receive your data in a machine-readable format

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

6. Shopify's Role

Rewarda operates as a Shopify app and accesses merchant and customer data through the Shopify API. Shopify acts as a data processor on our behalf. For information about how Shopify handles data, see Shopify's Privacy Policy.

7. Cookies

The Rewarda admin dashboard (embedded in Shopify Admin) does not set its own cookies. The storefront widget uses localStorage to temporarily cache the customer's session token for performance purposes. No cross-site tracking cookies are used.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related requests or questions, contact us at:
juanmaprivado3@gmail.com