Privacy Policy

Last updated: August 4, 2026

Offrz (“we”, “us”) is a Shopify app that lets shoppers make an offer on a merchant’s products and lets the merchant accept, counter, or decline it. This policy explains what data the app collects when a merchant installs it on their Shopify store, how we use that data, and how long we keep it.

The merchant who installs Offrz is the controller of their store’s and their shoppers’ personal data. We process that data as their processor, solely to provide the app.

Data we collect from merchants

• Store and account details. Your myshopify.com domain, the Shopify access token issued at install, and the name and email of the staff user who authenticates with the app.
• App settings. Your offer rules (which products or collections accept offers, and your accept, counter, and decline thresholds), your notification preferences, the email address you choose for offer alerts, and your onboarding progress.
• Billing records. Your subscription plan and the commission we meter to Shopify when an offer converts. Shopify handles payment; we never see your card details.

Data we collect about shoppers

When a shopper submits an offer, we store the offer itself: the product and variant, the original and offered price, the currency and quantity, the discount code and checkout we create for it, and the resulting order once it exists. Alongside it we store the shopper’s Shopify customer ID, name, email address, and phone number, so the merchant can identify and act on the offer and so we can email the shopper when an offer is declined.

We also keep a status history for each offer — what changed, when, and the underlying event data — which we use to reconcile offers and debug failed payments.

Shopify data we access

With the merchant’s permission at install, the app reads and writes products, inventory, orders, purchase options, discounts, payment mandates, and the theme’s app-embed status through Shopify’s APIs. We also receive webhooks for orders, app scope changes, and app uninstalls. We request only the scopes the offer flow needs and we do not copy your catalog or order history into our systems beyond the offer records described above.

How we use data

• To create, price, and settle offers on your store.
• To email you when an offer needs a decision, and to email a shopper when their offer is declined — if you enable those notifications.
• To meter and bill commission through Shopify.
• To operate, monitor, and troubleshoot the app, including internal alerts to our own team on installs, offers, billing, and failures. Those alerts carry your store domain and offer details only — never shopper contact details.

We do not sell personal data, and we do not use it to advertise or to train machine-learning models.

Service providers

• Shopify — the platform the app runs on and the source of store, order, and customer data.
• Heroku (Salesforce) — application hosting and the database where the records above are stored.
• Resend — delivery of the notification emails described above.
• Slack — internal operational alerts to our team.

Retention and deletion

• When a shopper is redacted. On Shopify’s customer redaction request we clear that shopper’s ID, name, email, and phone from their offers and delete the raw event data attached to them. The offer record itself remains as the financial record behind an order the merchant still has to reconcile.
• When you uninstall. Shopify sends a shop redaction request 48 hours after uninstall, and we then delete everything we hold for your store: offers and their history, offer rules, setup, notification settings, onboarding state, and your session and access token.
• Access requests. If a shopper asks a merchant what we hold about them, Shopify forwards the request to us and we respond to the merchant within 30 days.

Security

Data is transmitted over TLS and stored on managed infrastructure with access limited to the people who operate the app. Offer links are identified by a hashed token rather than a guessable ID. No system is perfectly secure, but we work to protect data against unauthorized access, loss, and misuse.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to its processing. Shoppers should contact the merchant they made an offer with; merchants, and anyone we can’t route through a merchant, can contact us directly and we will help.

Changes

We may update this policy as the app changes. Material changes will be reflected in the “last updated” date above and, where required, notified to merchants in the app.

Contact

Questions or requests: support@getoffrz.com.