Privacy Policy

8. GiftNudge: Shopper Data

GiftNudge lets shoppers at Shopify stores that use it save the birthdays and other special days of people they buy gifts for, and emails them reminders before each date. This section is for those shoppers. The store you saved a date with decides how GiftNudge is used and is responsible for your data; LewyApps processes it on the store's behalf. The store's own privacy policy applies as well.

What GiftNudge collects

• You: your email address. If you are signed in to your customer account, your first name, read from that store's Shopify account.
• The date you save: the recipient's name, the occasion, the day and month, and — only if you give them — the birth year and your relationship to the recipient. We also record which product you saved the date from.
• Consent record: when and where you saved the date, whether and when you confirmed your email address, when you unsubscribed, a hash of your IP address, and your browser's user-agent string.
• Email activity: opens and clicks for each reminder, and whether an address bounced or was reported as spam.
• Orders: GiftNudge receives the store's order notifications and keeps only orders it matches to a reminder — the order ID, the amount, and any GiftNudge discount code used.
• Discount codes: the codes created for your reminders and the date each belongs to.
• Server logs: standard request logs, which include IP addresses.

GiftNudge does not collect postal addresses, phone numbers, or payment details. Its storefront form sets no cookies; it keeps one display preference in your browser's local storage, which is never sent to us. Birthdays you save may belong to children; GiftNudge stores only what you enter and does not verify anyone's age.

Emails you receive

• Right after you save a date, you may get one email: if you typed your address, it asks you to confirm it, and no reminder is sent until you do; otherwise it tells you the date is saved and how to manage it. Addresses from a signed-in customer account are not confirmed.
• Reminders before each saved date — up to four per date, at the times the store chooses (for example 10 and 7 days before).
• A new link to manage your dates, when you ask for one.

Emails are sent in the store's name. Every email has a link to manage your dates and a one-click unsubscribe. GiftNudge sends no marketing email of its own.

How it is used and shared

Your data is used to send your reminders, create the discount codes they carry, show the store which reminders led to orders, and respond to privacy requests. We do not sell it. It is shared with:

• The store, which can see the recipient's name, your relationship to them, and your email address for recent saves and for each discount code. Discount codes are created in the store's Shopify account.
• Google Cloud, which hosts the app, its database, task queues, and logs.
• Resend, which sends the emails. It receives your email address and each email's content — including the recipient's name, the occasion and date, the discount code, and your first name — and reports opens, clicks, bounces, and spam reports back to us.
• Shopify, the platform the store runs on.

GiftNudge's application servers and database are in the United States (the database in Google Cloud's United States multi-region), and Resend is based in the United States, so if you are elsewhere, your data is transferred to the United States. Where personal information is transferred from the EEA, the UK or Switzerland, we rely on our providers' data processing terms — Google Cloud's Cloud Data Processing Addendum and Resend's Data Processing Addendum — which provide for the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents, or another recognised transfer mechanism.

How long it is kept

• Saved dates are kept while the store uses GiftNudge. Removing a date or unsubscribing stops the reminders but does not delete the data. To have it deleted, see "Your choices" below.
• A date saved with a typed address that is never confirmed is deleted after 30 days.
• When the store uninstalls GiftNudge, its data — including every date its shoppers saved — is deleted after 30 days, or at once when Shopify sends a store erasure request.
• When the store asks us to erase a customer's data, we delete their saved dates, reminders, discount-code records, email activity, matched orders, and consent record.
• Some records stay after deletion: a hash of any address that bounced or reported spam is kept permanently so we never email it again, and copies of earlier data exports stay until the store's data is deleted.
• After a store's GiftNudge data is deleted, we keep a business record of that store — its myshopify.com address, install and uninstall dates, plan and billing history, what it paid us, and the reason it gave Shopify for uninstalling — to run and account for our business. It contains no information about the store's customers and is kept without a set end date.

Your choices

The link in any GiftNudge email opens a page where you can see, add, edit, and remove your dates, and stop all reminders from that store. Signed-in shoppers can do the same from their customer account. To get a copy of your data or have it deleted, contact the store, or email us at support@lewyapps.com and we will work with the store. Copies of your data are provided through the store. If you saved dates under more than one email address, tell us each one.

Security

Data travels over HTTPS and is stored on Google Cloud, which encrypts it by default. Links to manage your dates are stored only as hashes. Access to GiftNudge's internal tools is limited to authorized LewyApps staff and is logged. We keep a written incident response plan: if we confirm that personal information of a store's customers was exposed, we tell that store without undue delay and within 72 hours, and notify Shopify as its partner terms require.