Privacy policy

Effective September 27, 2026. Chase Adams operates EasyPromoGift. Contact chase.observes@gmail.com about this policy or your information.

Information we use

For stores that install the app, we store shop identifiers, domains, currency, authentication credentials, and campaign settings including selected products, discount rules, promotional codes, and links. Shopify authentication sessions may include the merchant or staff user’s name, email, user ID, locale, and account role.

For permitted campaign reporting, we store link visit events and attributed order identifiers, order numbers, dates, currency, totals, discounts, refunds, and cancellation or test status. We do not retain shopper names, email addresses, phone numbers, shipping or billing addresses, or customer IDs in campaign analytics. Order and refund webhook payloads are processed to extract the fields the app needs.

The storefront uses functional session storage and cart attributes to remember an offer, prevent unwanted repeat additions, and record gift price acceptance. Separate reporting state records whether campaign measurement is permitted. Link visit records contain a campaign identifier, timestamp, and a deduplication marker; we do not store a shopper profile or cart ID in those records. For permitted checkout measurement, our Shopify app pixel sends the store, order and campaign identifiers, a random cart measurement marker, event identifier and time, and the applicable permission flags. It does not send customer contact details, payment data, page URLs, or the full event payload. Browser user-agent information is used transiently to filter bots. Hosting and Shopify infrastructure may process network metadata, including IP addresses, for delivery, security, and diagnostics.

Customer privacy choices

Campaign measurement uses Shopify’s customer privacy permissions. We require both analytics and marketing processing to be allowed before recording a campaign visit or enabling new order attribution. If either permission is unavailable or not allowed, optional measurement stays off. Gift eligibility and gift price acceptance continue to work without agreement to measurement.

We check permission on the storefront and in our Shopify app pixel when it receives checkout completion. New order reporting requires a permitted checkout event matched to the store’s order information; a campaign link or promo code alone is insufficient. Browser restrictions, ad blockers, or missing completion events can leave orders unmeasured. Changes reported by Shopify update optional reporting state separately from the gift offer. Shoppers can also use the store’s data-request process described below. Gift price acceptance is a purchasing choice and does not grant analytics or marketing permission.

Why we use it

We use this information to authenticate stores, create and apply promotional offers, generate links, calculate campaign reports, confirm subscriptions, provide support, prevent abuse, and handle data requests. We do not sell personal information or use campaign data for targeted advertising.

Service providers

Shopify provides the store, checkout, discounts, app authentication, and subscription billing. Railway hosts our application and database. Information you send to our support email is processed by our email provider. These services process information to provide their functions. Information may be processed outside your country, including in the United States.

Retention and deletion

We retain store settings, permitted campaign reports, and related refund records while needed to provide the installed app. New refund events without a permitted campaign order are not stored; older unmatched refund records are eligible for deletion after 30 days and removed by scheduled cleanup. When Shopify sends a customer deletion request, we erase matching order and refund records and retain a keyed, non-reversible replay marker to prevent their recreation.

Uninstalling removes authentication sessions and pauses campaigns. Shopify subsequently sends a shop deletion webhook; when received and authenticated, we erase the shop’s application records. These deletion actions apply to our active application database. Deletion timing depends on Shopify delivery and retries. Data-access requests received from Shopify are made available to the merchant through the app’s Privacy requests page for fulfillment.

Security and your choices

We use encrypted HTTPS connections, access controls, authenticated webhooks, and hosting storage encryption. No method of storage or transmission is completely secure. Merchants control the use of the app in their stores and remain responsible for their customer-facing notices and legal obligations. Shoppers may contact the store about their data; merchants may contact us to request access, correction, or deletion, subject to applicable requirements.

Policy updates

We may update this policy as the service changes. The effective date above identifies the current version. Contact us if you have questions about a material change.