Privacy Policy

Last updated: February 2026

1. Introduction

Convertli (“we”, “our”, “us”) operates the Convertli Shopify application. This Privacy Policy explains how we collect, use, store, and protect information when you install and use our app.

2. What Data We Access

When you install Convertli, we access the following through Shopify:

  • Store name, URL, and owner email — provided through Shopify OAuth during installation
  • Product data — titles, prices, images, and inventory (read-only access for widget display purposes)
  • File storage access — for trust badge custom image uploads
  • Widget configuration settings — stored as Shopify app metafields

3. What Data We Do NOT Access

We want to be completely transparent about what we do not collect:

  • Customer personal information — we never access customer names, emails, or addresses
  • Payment or credit card information — we have zero access to any financial data
  • Customer browsing behavior or analytics — we do not track your customers in any way
  • No cookies placed on storefront visitors — the only exception is a localStorage item for the countdown timer evergreen mode and sticky bar dismiss state

4. How Data Is Stored

  • Widget configurations — stored in Shopify app metafields (hosted and managed by Shopify)
  • Session data — stored in our database on Fly.io servers
  • All data is encrypted in transit (TLS) and at rest
  • No data is sold or shared with third parties — ever. The only external party involved is Shopify, which processes billing and provides the platform.

5. How We Use Your Information

We use collected information to:

  • Provide and maintain the Convertli service
  • Save and apply your widget configurations
  • Communicate with you about your account and provide support
  • Improve our app based on aggregated, anonymized usage patterns

6. GDPR Compliance

We fully support GDPR requirements for EU merchants:

  • Customer data requests — we support the customers/data_request webhook
  • Customer data deletion — we support the customers/redact webhook
  • Store data deletion on uninstall — we delete all store data within 48 hours of uninstall via the shop/redact webhook
  • EU merchants: all data is processed in full compliance with GDPR

If you’re in the EU/EEA, you have the right to request a copy of your data, request deletion, or restrict processing. Contact support@convertli.io for any data requests.

7. Data Retention

  • Widget configuration data — retained while the app is installed on your store
  • Session data — retained while the app is installed
  • All data deleted within 48 hours after app uninstall

8. Changes to This Policy

We may update this policy from time to time. We’ll notify you of significant changes through the app or via email.

9. Contact Us

For privacy-related questions or data requests, email us at support@convertli.io