PromoDisplay Privacy Policy

Effective January 20, 2026 · Shopify app by The Brand Arsenal

Introduction

Promo Display ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.

Information We Collect

Store Information

When you install our app, we collect:

Store domain name
Store owner email (provided by Shopify during OAuth)
Access tokens for API communication

App Configuration Data

We store your app settings including:

Promotion configurations (discount codes, product associations)
Badge designs and display rules
Slider content and settings
Banner design preferences

Analytics Data

We collect anonymous analytics to help you understand promotion performance:

Promotion views and code copies (aggregated counts)
Slider impressions and clicks (aggregated counts)
Anonymous session identifiers (not tied to customer accounts)
Device type (desktop/mobile/tablet)

What We Do NOT Collect

We do not collect or store:

Customer personal information (names, emails, addresses)
Payment or financial information
Customer order details beyond discount code usage
Any data from customers who visit your store

How We Use Your Information

We use the collected information to:

Provide and maintain the Promo Display service
Display promotional banners, badges, and sliders on your storefront
Generate analytics reports on promotion performance
Process billing through Shopify's payment system
Send important service notifications
Improve our app and develop new features

Data Sharing

We do not sell, trade, or rent your information to third parties. We may share data with:

Shopify: For authentication, billing, and API communication
Cloud Infrastructure Providers: AWS for hosting (data processing only)
Legal Requirements: When required by law or to protect our rights

Data Retention

We retain your data for as long as you have the app installed. When you uninstall the app, your configuration data is retained for 48 hours to allow for reinstallation. After 48 hours, or upon receiving a GDPR shop redaction request, all your data is permanently deleted from our systems.

Analytics data is retained for 90 days in detailed form, and aggregated summaries are retained for up to 2 years for historical reporting.

Data Security

We implement appropriate technical and organizational measures to protect your data:

Encrypted data transmission (HTTPS/TLS)
Encrypted data storage
Regular security audits
Access controls and authentication
Secure cloud infrastructure (AWS)

Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

Access: Request a copy of your data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data
Portability: Request your data in a portable format
Objection: Object to certain processing of your data

To exercise these rights, contact us at [email protected] or uninstall the app (which triggers automatic data deletion after 48 hours).

CCPA Compliance

California residents have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information. You may request disclosure of data collected or deletion of your data by contacting us.

Children's Privacy

Our service is intended for business use and is not directed at children under 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us:

Email: [email protected]