Privacy Policy

Effective July 19, 2026

DiscountForge (“the app”) is a discount rules engine for Shopify stores, operated by the DiscountForge team (support@discountforge.app). This policy describes what data the app processes when a merchant installs it, why, and how it is handled.

What we collect

• Store information: your myshopify domain and an offline API token, required to operate the app on your store.
• Discount rules: the rule configurations you create in the app.
• Customer tags: to power tag-based discounts, the app mirrors customer tags into a Shopify metafield on the customer record. This data stays inside your Shopify store; the app does not keep a copy, and it never processes customer names, emails, addresses, or order history.

How we use it

Data is used solely to provide the app’s functionality: creating and running discount rules at checkout. We do not sell data, share it with third parties for marketing, or use it for any purpose beyond operating the app.

Where it lives

• App data is hosted on Fly.io (United States), encrypted at rest and in transit.
• Error reports (technical diagnostics, no customer personal data) are processed by Sentry (United States).
• Customer tag metafields live inside Shopify, in your store.

Retention and deletion

When you uninstall the app, Shopify revokes its access immediately and sends the mandatory redaction webhooks; the app deletes all stored data for your shop (rules and session tokens) within 48 hours. Customer redaction requests are honored automatically — the app stores no per-customer data to begin with, and Shopify removes app metafields together with the customer.

GDPR / privacy requests

The app implements Shopify’s mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). For any other privacy question or request, email support@discountforge.app — we respond within 24 hours on business days.

Changes

If this policy changes materially, we will update this page and note the new effective date above.