We Take Your Privacy Seriously ❤️

At Shopiment.io (the developer of Flexibar), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you install and use Flexibar, the AI-powered announcement bar and bundle app on the Shopify App Store.

By installing Flexibar or using our services, you agree to the practices described in this policy. If you do not agree, please do not install or use the app. This policy is designed to align with Shopify's Partner Program Agreement, the Shopify API License and Terms of Use, and Shopify's Protected Customer Data requirements.

We collect only the minimum data necessary for Flexibar to function.

Merchant and store information (provided via the Shopify API when you install the app):

• Store owner name, email address, phone number, and physical address
• Store name and store URL
• Shop ID and basic account details

Store content data:

• Products and collections (to enable product-specific promotions, countdowns, and bundles)
• Online Store theme information (to render announcement bars correctly and confirm the Flexibar app embed is enabled)

Bundle and cart data:

• Bundle configurations you create (selected products, quantity tiers, discount values, rewards, and product pools)
• Cart contents processed at runtime (products and quantities) so the correct bundle or quantity-break price can be applied. This does not include shopper identity, contact, or payment details.

Usage and configuration data:

• Announcement bar settings, messages, targeting rules (geo, device, page, schedule), countdown timers, slider configurations, and coupon settings you create
• Performance data such as impressions, clicks, and views of your bars (aggregated and anonymized where possible)

Technical and usage data (Flexibar dashboard):

• IP address, browser type, device information, and access logs when you use the Flexibar admin
• Analytics on how you interact with the app (to improve features and fix bugs)

Storefront visitor signals:

Flexibar does not collect, store, or sell personally identifiable information about your shoppers. To decide whether to show a bar and to measure performance, the storefront component may process limited technical signals, such as approximate country (derived from IP for geo-targeting), device type, and anonymous interaction events (impressions and clicks). These signals are used transiently or in aggregate and are not used to identify individual shoppers.

Flexibar requests only the scopes required to deliver its features:

• read_products - to read your products and collections so you can target bars to specific products or collections, display product details (title, price, image, availability) in bundle popups, and build quantity and mix-and-match bundles.
• read_themes - to read your Online Store theme so bars render correctly and in the right position, and so we can confirm the Flexibar app embed is enabled.
• write_cart_transforms - to apply bundle and quantity-break pricing in the cart. This lets Flexibar adjust eligible cart line pricing through Shopify's Cart Transform function so shoppers see the correct bundle price. This scope processes cart contents (products and quantities) only; it does not grant access to shopper personal, contact, or payment information.

We do not request access to the Shopify Customer object, orders, or other Protected Customer Data (see Section 6).

We use the collected information to:

• Provide, operate, and maintain Flexibar (including AI message generation, multi-language support, targeting, announcement bars, and bundles)
• Enable features such as geo-targeting, device-specific bars, scheduling, countdowns, coupons, and bundle pricing
• Analyze app usage to improve performance, add features, and troubleshoot issues
• Communicate with you about support, updates, or important notices
• Comply with legal obligations and prevent fraud or abuse
• Generate aggregated, anonymized insights to improve our services (no individual merchant data is sold)

Flexibar's Selling Bar and bundle features use Shopify's Cart Transform function to apply discounts (for example, buy-more-save-more tiers and build-your-own bundles). When a cart qualifies, the transform calculates and applies the bundle price. This processing is based on the products and quantities in the cart and the bundle rules you configure. It does not read or store shopper identity, contact details, addresses, or payment information. How bundle pricing combines with other Shopify discounts follows Shopify's discount-combination rules.

We never sell or rent your personal information. We share data only in these limited cases:

• With Shopify: as required for the app to function on the Shopify platform (governed by Shopify's own privacy policy).
• Service providers (sub-processors): trusted vendors that process data only on our behalf under confidentiality and data-protection agreements. These include cloud hosting and infrastructure, our AI provider (used only to generate or translate the bar copy you request), and analytics and error-monitoring tools. A current list of sub-processors is available on request.
• Legal requirements: when required by law, court order, or to protect our rights, safety, or property.
• Business transfers: in a merger, acquisition, or sale of assets, data may be transferred with appropriate notice.

When you use AI Message or AI Translation, the text you enter is sent to a third-party AI provider to generate or translate copy. We send only the content you choose to generate, never customer data.

Flexibar is built to meet Shopify's platform requirements:

• Protected Customer Data: Flexibar does not request access to Shopify's Protected Customer Data or the Customer object. Our access is limited to products, themes, and cart-transform functionality. Under Shopify's classification, this corresponds to Level 0 (no customer data).
• Mandatory compliance webhooks: as required for all Shopify App Store apps, Flexibar subscribes to and responds to the mandatory compliance webhooks: customers/data_request, customers/redact, and shop/redact. Because Flexibar does not store shopper personal data, customers/data_request and customers/redact generally return no personal data. The shop/redact webhook (which Shopify sends 48 hours after you uninstall) triggers deletion of your store's data from our systems.
• Data minimization and transparency: we process only the minimum data required to provide the app, limit processing to the purposes described here, apply retention limits, and encrypt data in transit and at rest.
• Terms: our handling of Shopify data is also governed by the Shopify API License and Terms of Use and the Shopify Partner Program Agreement.

We retain your data only as long as needed to provide the service or to meet legal obligations. When you uninstall Flexibar, we stop processing your data and delete or anonymize your store's configuration and associated data within 30 days, and in all cases upon receipt of Shopify's shop/redact webhook (sent 48 hours after uninstall). We respond to data access and deletion requests within 30 days, except where we are legally required to retain data. If you reinstall within 30 days, your configurations may be restored.

We use industry-standard security measures, including encryption in transit and at rest, access controls, and secure hosting, to protect your data. We also apply practices such as environment separation, limited staff access to data, logging, and an incident response process. No system is 100% secure, but we work to reduce risk and respond quickly if an issue arises.

In the Flexibar admin dashboard, we may use cookies and similar technologies to remember your preferences and analyze usage. On your storefront, Flexibar may use lightweight cookies or local storage to remember whether a visitor has dismissed a bar and to control display frequency, and to record anonymous impression and click events. These do not identify individual shoppers. You can manage cookies through your browser settings.

Depending on your location (for example, GDPR in Europe, CCPA/CPRA in California), you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Receive your data in a portable format
• Opt out of the sale or sharing of personal data (we do not sell personal data)

To exercise these rights, email us at support@shopiment.io. We respond within 30 days or as required by law. If you uninstall the app from Shopify, we automatically delete your associated data as described in Section 7. A Data Processing Addendum (DPA) is available to merchants on request.

Shopiment.io is based in Singapore. Your data may be transferred to and processed in Singapore, the United States, or other countries where our service providers operate. We use appropriate safeguards (such as Standard Contractual Clauses) to protect your data during these transfers.

Flexibar is not intended for children under 13 (or the applicable age in your country). We do not knowingly collect data from children.

We may update this policy from time to time. We will notify you of material changes by email or through the Flexibar dashboard. The "Last Updated" date at the top shows when changes were made.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: