Privacy Policy

1. Introduction

Welcome to URL Shortener ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application available at https://shpurl.link (the "Service").

We are committed to protecting your privacy and ensuring the security of your personal information. This policy describes our practices regarding data collection, usage, and protection.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you install our app, we collect your Shopify store information including store name, email address, and store URL
• URL Data: Original URLs you want to shorten, custom slugs, titles, and descriptions you provide
• Contact Information: Email address for support and communication purposes

2.2 Automatically Collected Information

• Usage Analytics: Click data, geographic location (country/city level), referrer information, device type, and browser information
• Technical Data: IP addresses, browser type, operating system, access times, and pages viewed
• App Usage: Features used, frequency of use, and performance metrics

2.3 Shopify Data

Through Shopify's API, we may access:

• Store information and settings
• Product data (if you create product-related short URLs)
• Order data (for tracking campaign effectiveness)
• Customer data (aggregated and anonymized for analytics)

3. How We Use Your Information

We use the collected information for the following purposes:

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Cloud hosting and data storage
• Analytics and performance monitoring
• Customer support services
• Security and fraud prevention

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal process or government requests
• Enforcement of our terms of service
• Protection of our rights, property, or safety
• Emergency situations involving potential harm

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction, subject to equivalent privacy protections.

5. Data Retention

We retain your information for the following periods:

• Account Data: Until you uninstall the app or delete your account
• URL Data: Until you delete specific URLs or uninstall the app
• Analytics Data: Up to 24 months for performance analysis
• Log Data: Up to 12 months for security and troubleshooting

After the retention period, we securely delete or anonymize your data unless longer retention is required by law.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Data encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Regular Audits: Security assessments and vulnerability testing
• Monitoring: 24/7 security monitoring and incident response
• Compliance: SOC 2 Type II and ISO 27001 certified infrastructure

7. Shopify Integration

Our app integrates with Shopify's platform and follows Shopify's privacy requirements:

• We only request necessary permissions for app functionality
• Data access is limited to what's required for URL shortening services
• We comply with Shopify's App Store Review Guidelines
• Customer data is handled according to Shopify's privacy standards

For more information about Shopify's privacy practices, please review Shopify's Privacy Policy.

8. Cookies and Tracking

8.1 Cookies We Use

8.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect app functionality.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Request transfer of your data
• Restriction: Request limitation of data processing
• Objection: Object to data processing for legitimate interests
• Withdraw Consent: Withdraw consent where applicable

To exercise these rights, please contact us using the information in the Contact section.

10. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR):

• We process data lawfully, fairly, and transparently
• Data collection is limited to specified purposes
• We maintain data accuracy and security
• We respect your rights as a data subject
• We have appointed a Data Protection Officer when required

Legal Basis for Processing: We process your data based on contract performance, legitimate interests, and your consent where required.

11. CCPA Compliance

For California residents, under the California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal information we collect about you
• Know whether we sell or disclose your information
• Say no to the sale of your information
• Access your personal information
• Request deletion of your information
• Equal service and price, even if you exercise your rights

12. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Sending an email notification to registered users
• Displaying a notice in the app interface

Changes become effective immediately upon posting. Your continued use of the service after changes constitutes acceptance of the new policy.

14. Contact Information