Privacy Policy
Last updated: February 2026
1. Introduction
Convertli (“we”, “our”, “us”) operates the Convertli Shopify application. This Privacy Policy explains how we collect, use, store, and protect information when you install and use our app.
2. What Data We Access
When you install Convertli, we access the following through Shopify:
- Store name, URL, and owner email — provided through Shopify OAuth during installation
- Product data — titles, prices, images, and inventory (read-only access for widget display purposes)
- File storage access — for trust badge custom image uploads
- Widget configuration settings — stored as Shopify app metafields
3. What Data We Do NOT Access
We want to be completely transparent about what we do not collect:
- Customer personal information — we never access customer names, emails, or addresses
- Payment or credit card information — we have zero access to any financial data
- Customer browsing behavior or analytics — we do not track your customers in any way
- No cookies placed on storefront visitors — the only exception is a
localStorageitem for the countdown timer evergreen mode and sticky bar dismiss state
4. How Data Is Stored
- Widget configurations — stored in Shopify app metafields (hosted and managed by Shopify)
- Session data — stored in our database on Fly.io servers
- All data is encrypted in transit (TLS) and at rest
- No data is sold or shared with third parties — ever. The only external party involved is Shopify, which processes billing and provides the platform.
5. How We Use Your Information
We use collected information to:
- Provide and maintain the Convertli service
- Save and apply your widget configurations
- Communicate with you about your account and provide support
- Improve our app based on aggregated, anonymized usage patterns
6. GDPR Compliance
We fully support GDPR requirements for EU merchants:
- Customer data requests — we support the
customers/data_requestwebhook - Customer data deletion — we support the
customers/redactwebhook - Store data deletion on uninstall — we delete all store data within 48 hours of uninstall via the
shop/redactwebhook - EU merchants: all data is processed in full compliance with GDPR
If you’re in the EU/EEA, you have the right to request a copy of your data, request deletion, or restrict processing. Contact support@convertli.io for any data requests.
7. Data Retention
- Widget configuration data — retained while the app is installed on your store
- Session data — retained while the app is installed
- All data deleted within 48 hours after app uninstall
8. Changes to This Policy
We may update this policy from time to time. We’ll notify you of significant changes through the app or via email.
9. Contact Us
For privacy-related questions or data requests, email us at support@convertli.io