Privacy Policy

Last updated: April 17, 2026

Getvelify ("we", "our", or "us") operates the Getvelify Shopify app. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our app and the choices you have associated with that data.

1. Data We Collect

When you install Getvelify on your Shopify store, we collect and store:

• Shop information: Your Shopify store domain and OAuth access token (required to read orders)
• Order data: The last 50 orders from your store, including product name, product image, and partial customer information (first name and city only — never full names, email addresses, or payment details)
• Widget settings: Your customization preferences (colors, position, timing)
• Analytics data: Aggregate impression and click counts per day (no personal data)

2. How We Use Your Data

• To display purchase notification popups on your storefront to your visitors
• To provide you with analytics about widget performance
• To maintain your widget customization settings

We do not sell, trade, or rent your data to third parties.

3. Customer Data & GDPR

Getvelify only stores the minimum customer data necessary to show purchase notifications:

• Customer first name (optional — can be disabled in settings)
• Customer city (optional — can be disabled in settings)
• Customer country code (used to apply GDPR anonymization for EU customers)

For customers in EU/EEA countries, customer names are automatically anonymized to "Someone" in all notifications, regardless of your settings.

We comply with Shopify's GDPR webhook requirements. Upon receiving a customer data erasure request, we remove all associated customer data from our systems within 30 days.

4. Data Retention

We retain order data for a maximum of 7 days for display purposes. Only the last 50 orders per store are kept. When you uninstall Getvelify, all your store's data (including order data) is deleted from our systems within 48 hours.

5. Data Security

All data is stored in Supabase (PostgreSQL) with row-level security enabled. All API communication is over HTTPS. Your Shopify access token is stored encrypted and never exposed publicly.

6. Third-Party Services

We use the following third-party services:

• Supabase – Database hosting (Privacy Policy)
• Railway – Server hosting (Privacy Policy)
• Shopify – App platform (Privacy Policy)

7. Your Rights

You have the right to access, update, or delete the information we hold about your store. To exercise these rights, contact us at support@getvelify.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@getvelify.com.