CartGift Privacy Policy

Operator: J-spades. Updated October 13, 2026.

CartGift manages a merchant’s gift-with-purchase promotion. We store the shop domain, Shopify authorization sessions, and promotion synchronization identifiers. Promotion settings are stored in an app-owned Shopify discount metafield. We access selected product and collection identifiers and titles to configure gifts.

We do not request access to customer profiles or orders. Cart items and prices are evaluated by a Shopify Function running on Shopify infrastructure; they are not sent to our application server. We do not sell personal information or use advertising trackers.

Authorization data is used only to operate and secure the app. It is stored on the operator’s server and processed by Shopify as necessary to provide the service. Server access logs may include IP addresses and request timestamps for security. Logs are rotated.

When the app is uninstalled or Shopify sends a shop erasure request, active shop records are deleted. Access-restricted disaster recovery backups expire within 14 days. After a restore, pending Shopify erasure notifications must be reapplied before service resumes.

For access, correction, deletion, or privacy questions, contact jspades056@gmail.com. No customer records are retained for customer data requests.