Privacy Policy

Effective July 19, 2026

DiscountForge (“the app”) is a discount rules engine for Shopify stores, operated by the DiscountForge team (support@discountforge.app). This policy describes what data the app processes when a merchant installs it, why, and how it is handled.

What we collect

• Store information: your myshopify domain and an offline API token, required to operate the app on your store.
• Discount rules: the rule configurations you create in the app.
• Storefront widget wording: any custom text you set for the reward bar, so the widget can show it.
• Customer tags: to power tag-based discounts, the app mirrors customer tags into a Shopify metafield on the customer record. This data stays inside your Shopify store; the app does not keep a copy, and it never processes customer names, emails, addresses, or order history.

Permissions we request

• Edit discounts: create and update the automatic discounts that your rules define. This is the app’s core job.
• Edit customers: used only to write a tag-snapshot metafield on the customer record so VIP or wholesale pricing can be applied at checkout. We do not read or store personal details.
• View products: used only to look up product titles, images and links so a rule that targets specific products can show them in the storefront widget. Product data itself is never changed.

How we use it

Data is used solely to provide the app’s functionality: creating and running discount rules at checkout. We do not sell data, share it with third parties for marketing, or use it for any purpose beyond operating the app.

Where it lives

• App data is hosted on Fly.io (United States), encrypted at rest and in transit.
• Error reports (technical diagnostics, no customer personal data) are processed by Sentry (United States).
• Customer tag metafields live inside Shopify, in your store.

Retention and deletion

When you uninstall the app, Shopify revokes its access immediately and sends the mandatory redaction webhooks; the app deletes all stored data for your shop (rules, widget wording, setup markers and session tokens) within 48 hours. Customer redaction requests are honored automatically — the app stores no per-customer data to begin with, and Shopify removes app metafields together with the customer.

GDPR / privacy requests

The app implements Shopify’s mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). For any other privacy question or request, email support@discountforge.app — we respond within 1 business day.

Changes

If this policy changes materially, we will update this page and note the new effective date above.