Legal

Privacy Policy

Effective date: 27-07-2027 Last updated: 27-07-2026

This Privacy Policy describes how RWC ("we," "us," or "our") collects, uses, and protects information across our software products — Shopify applications, web applications, and mobile applications (collectively, the "Services"). It applies to all Services we build and maintain, unless a specific Service links to its own policy.

01

Scope

This policy covers:

  • Shopify applications listed in the Shopify App Store or installed on merchant stores
  • Web applications hosted at reactwithcode.com or related domains
  • Mobile applications distributed via the Apple App Store and/or Google Play

Some Services store data only temporarily to process a request ("pass-through"), while others store data on our servers to provide ongoing functionality (e.g., saved settings, analytics, logs). The handling depends on the specific Service — see Section 4.

02

Information we collect

Account & store information

  • Shop name, domain, email, and plan details (for Shopify apps, via the Shopify Admin API)
  • Account credentials or tokens required to authenticate API access

Customer / end-user data (where applicable)

  • Order, product, or customer information accessed via granted API scopes, solely to provide the app's functionality
  • Contact details submitted through forms, checkout extensions, or app features

Usage & technical data

  • Log data (IP address, browser type, device type, pages visited)
  • Analytics events (feature usage, error logs) used to improve the Services
  • Cookies or similar technologies on web applications

Mobile-specific data

  • Device identifiers, push notification tokens, and permissions you grant (camera, location, etc.), only where required for a specific feature

We only collect what is necessary for the Service in question to function.

03

How we use information

  • Provide, operate, and maintain the Service
  • Authenticate and process API requests (e.g., Shopify Admin/Storefront API calls)
  • Diagnose issues, monitor performance, and improve functionality
  • Communicate with you about updates, support, or billing
  • Comply with legal obligations

We do not sell personal data. We do not use merchant or customer data for advertising purposes.

04

Data handling by service type

Service typeData storage approach
Shopify apps (pass-through) Data is processed in-memory or transiently to fulfill a request and is not persisted on our servers beyond what's needed for the transaction.
Shopify apps (persistent) App settings, cached store data, or logs may be stored in our database (e.g., hosting provider) to support ongoing features.
Web applications User-submitted data and analytics may be stored in our database to provide account features and improve the product.
Mobile applications Device tokens and user-generated content may be stored to support notifications, sync, or saved preferences.

Update this table per app if a specific product needs more detail — you can link out to an app-specific addendum if one product differs meaningfully from the rest.

05

Third-party sharing

We may share data with trusted service providers who help us operate the Services, such as:

  • Hosting/infrastructure providers (e.g., Vercel / Render / AWS)
  • Analytics providers (e.g., Google Analytics / Plausible)
  • Email or notification providers (e.g., SendGrid / Firebase)
  • Payment processors (e.g., Shopify Billing API, Stripe)

These providers are contractually obligated to protect data and use it only to perform services on our behalf. We do not share data with third parties for their own marketing purposes.

06

Retention & deletion

We retain data only as long as necessary to provide the Service or comply with legal requirements. Merchants and users may request deletion of their data by contacting us (Section 11).

For Shopify apps, we comply with Shopify's mandatory GDPR webhooks — customers/data_request, customers/redact, shop/redact — to handle data subject requests automatically.

07

Your rights

Depending on your location, you may have rights under GDPR, CCPA, or similar laws, including the right to:

  • Access the data we hold about you
  • Request correction or deletion
  • Object to or restrict certain processing
  • Request a copy of your data in a portable format

To exercise these rights, contact us using the details in Section 11.

08

Security

We use reasonable technical and organizational measures — encryption in transit, access controls, secure token storage — to protect data against unauthorized access, loss, or misuse. No system is 100% secure, and we cannot guarantee absolute security.

09

Children's privacy

Our Services are not directed to children under 13 (or 16, where applicable), and we do not knowingly collect data from children.

10

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of a Service after changes constitutes acceptance.

11

Contact us

Business
RWC
Email
hari@reactwithcode.com
Website

This policy applies to all current and future Shopify apps, web applications, and mobile applications developed by RWC, unless a specific app links to a separate, app-specific privacy policy.