Privacy Policy

Last updated: March 15, 2025

1. Introduction

ShipBar ("we", "our", or "us") operates a Shopify application that displays a free shipping progress bar on merchant storefronts. This Privacy Policy explains how we collect, use, and protect information when you install and use our app.

By installing ShipBar, you agree to the practices described in this policy.

2. Information We Collect

From Merchants (Shopify Store Owners)

  • Shop domain — your .myshopify.com domain, used to identify your store.
  • Access token — an OAuth token issued by Shopify to read/write data on your behalf (scoped to what the app needs).
  • App settings — your configuration preferences (colors, goal amount, messages, position, etc.).
  • Subscription data — your current plan, billing dates, and Shopify charge ID.

From Store Visitors

  • No personal data is collected from your store's end customers. The ShipBar script reads the cart total from the Shopify storefront to calculate progress and does not store, transmit, or log any visitor information.

3. How We Use Your Information

  • To provide and operate the ShipBar app on your storefront.
  • To manage your subscription and process billing through Shopify's billing API.
  • To store and apply your customization settings.
  • To send transactional communications related to your account (e.g., subscription changes).
  • To improve the app based on usage patterns.

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Data Storage and Security

Your data is stored in a secure database (Supabase) hosted on infrastructure with encryption at rest and in transit. We implement industry-standard security measures to protect against unauthorized access.

Access tokens are stored encrypted and are only used to make API calls necessary for the app's functionality.

5. Data Deletion

You have the right to request deletion of all data associated with your store at any time. We take this seriously and process all deletion requests promptly.

Automatic deletion on uninstall

When you uninstall ShipBar from your Shopify store, Shopify sends us an app/uninstalled webhook. Upon receiving it, all associated data — including your access token, app settings, and subscription records — is permanently and immediately deleted from our systems.

Manual deletion request

You can also request deletion of your data at any time, even while the app is still installed, by contacting us at privacy@shipbar.app. Please include your store's .myshopify.com domain in the request so we can locate and remove your records quickly.

We will confirm the deletion within 5 business days and complete it within 30 days of your request.

What gets deleted

  • Your shop domain and OAuth access token.
  • All customization settings (colors, messages, goal, etc.).
  • Subscription and billing history stored on our side.
  • Any logs or metadata associated with your store.

Note: Shopify retains its own billing records independently. For records held by Shopify, please refer to Shopify's Privacy Policy.

6. Third-Party Services

We use the following third-party services to operate ShipBar:

  • Shopify — payment processing and app distribution. Shopify's own Privacy Policy applies to their platform.
  • Supabase — database hosting for storing settings and merchant data.
  • Railway — server hosting and deployment infrastructure.

7. Data Retention

We retain your data only for as long as your store has ShipBar installed. Once you uninstall the app or submit a deletion request, your data is removed immediately as described in Section 5.

8. Your Rights

Depending on your location, you may have rights including:

  • Access to your personal data we hold.
  • Correction of inaccurate data.
  • Deletion of your data.
  • Data portability.

To exercise any of these rights, contact us at privacy@shipbar.app.

9. Cookies

The ShipBar script on your storefront uses localStorage (not cookies) to remember if a visitor has dismissed the bar. No tracking cookies are set by our app. Our marketing website (shipbar.app) may use analytics tools that set cookies — you can disable these through your browser settings.

10. Children's Privacy

ShipBar is designed for merchants and is not directed at children under 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy, please contact us at:

privacy@shipbar.app