Privacy and Data Protection Policy

This Privacy and Data Protection Policy (“Policy”) outlines the practices followed by Conversion Apps (referred to as “we,” “us,” or “our”) in connection with the collection, use, and protection of personal data processed through our Shopify app Discount Dive (“App”). This Policy is designed to comply with Shopify’s privacy and data handling requirements and to demonstrate our commitment to safeguarding merchant and customer information.

By installing or using the App, you (“Merchant” or “you”) agree to the practices outlined in this Policy.

Minimal Data Collection

We only collect and process the minimum personal data necessary to operate the App and deliver its features. No unnecessary data is collected or stored for unrelated purposes.

Data Processed by the App

To deliver core app functionality, such as discount code generation, analytics, and in-dashboard reporting, the App may process the following merchant data:

• Store name

• Store domain

• Storefront theme ID

• Shopify API tokens (for syncing discount codes)

We do not access or store end-customer personal information unless required by Shopify API behavior (e.g., for displaying earned codes on the storefront).

Customer Data Visibility and Sync

• Discount codes earned through the game are generated with secure, randomized formats (e.g., DISCOUNT15ZK9YLQ) and optionally synced to your Shopify admin.

• Code visibility on the storefront includes code value, time earned, and copy-to-clipboard functionality—fully controlled by the merchant.

Security Measures

Customizable Code Security

• Merchants can configure code formats including:

  • Store name prefix

  • Letters & numbers or numbers-only suffix

  • Suffix length (1–12 characters; default: 6)

• These settings enhance security and prevent code guessing or misuse.

Usage Restrictions

• Codes may be set to:

  • Unlimited use

  • One-time use per customer

  • Single-use only (globally)

We recommend merchants use stricter rules for high-value discounts to prevent abuse.

Custom Messaging and UI Control

• Merchants can fully control all customer-facing text:

  • Game over messages

  • Discount win messages

  • Call-to-action text

  • Button labels and reward summaries

No data is collected through this customization process.

Embedded Game Features

The embedded version of Discount Dive includes:

• A live storefront game reflecting your admin configuration

• Real-time display of earned discount codes under the game

• Click-to-copy functionality for easy checkout use

• Saved session rewards so customers can collect multiple discounts

The app does not track gameplay behavior beyond what’s needed to determine reward eligibility.

Customizable Launcher Section (Banner Block)

• Merchants may add a theme section/banner that links to the game

• Banner text, button, background color, and destination URL are fully customizable

• No personal data is collected through this feature

Data Retention Policy

• All personal data is deleted within 3 days of app uninstallation.

• We retain no data beyond the operational necessity or outside of what is allowed by Shopify’s API policies.

Encryption and Data Storage

• All sensitive data is encrypted at rest and in transit using OpenSSL encryption

• Backups are encrypted and stored in secure, geographically redundant servers located within the United States

Access Control & Staff Policies

• Access to protected data is limited to authorized personnel based on least privilege

• All staff accounts use strong passwords and mandatory two-factor authentication (2FA)

• Access logs are maintained and regularly reviewed to detect unauthorized access

Security Incident Response

• In case of a breach, we follow a strict incident response plan:

  • Immediate containment and investigation

  • Notification to affected merchants and authorities (if applicable)

  • Remediation steps and transparency reports

  • Lessons learned applied to enhance system protection

No Third-Party Sharing

• We never sell, rent, or share merchant or customer data with third parties

• The App does not expose or publish customer data

📩 Contact & Support

For any privacy-related questions or to request data deletion, contact us at:

📧 support@conversionapps.net
📍 Developer: Conversion Apps