Privacy Policy for Simplify ‑ Product Summary

Effective Date: 18/12/2024

Last Updated: 08/07/2025

Thank you for using Simplify ‑ Product Summary (“Simplify”, “we”, “us”, or “our”), a Shopify app that enables merchants to collect customer-generated content, including uploaded media, product tags, custom fields, and email addresses. This Privacy Policy describes how we collect, use, and protect personal data when merchants install our app and when their customers interact with it. It also outlines your rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

a. From Shopify Merchants

When you install Simplify, we collect certain data from your Shopify store via Shopify’s APIs:

• Store name and contact email
• Storefront and shop settings
• Product, order, and customer data (as required for app functionality)

We only request the minimum permissions necessary to operate the app.

b. From Customers

When customers interact with the Simplify gallery, we may collect:

• Descriptions, tags, or custom field data
• IP address, browser type, and usage data (for analytics and security)

2. Legal Basis for Processing (GDPR)

Under the GDPR, we process personal data on the following legal bases:

• Consent – when customers voluntarily submit data (e.g. uploads, email)
• Performance of a contract – to provide the services described
• Legitimate interests – such as maintaining app functionality, improving service, or preventing abuse

Merchants are responsible for obtaining valid customer consent, where required by law, for collecting and processing personal data through their storefront.

3. How We Use the Information

We use collected data to:

• Provide and operate the Simplify app
• Display customer-submitted content on your store
• Associate uploaded content with products or metadata
• Deliver analytics and reporting features
• Prevent abuse or spam
• Respond to merchant support requests

Customer emails may be used to identify submitters or allow merchants to follow up, but we do not send marketing emails or use emails for our own promotion.

4. Data Storage and Security

We use industry-standard security measures to protect data, including:

• Encrypted storage and secure cloud infrastructure (e.g., AWS S3)
• Limited access by authorized personnel only
• HTTPS encryption during data transmission

5. Data Sharing and Disclosure

We do not sell personal data. We may share data:

• With merchants who use the app (e.g., customer submissions)
• With trusted third-party service providers (e.g., cloud storage)
• When required to comply with legal obligations
• In the event of a business transfer or merger

6. Data Retention

We retain data only as long as necessary to provide our services:

• Merchant and customer data is deleted within 30 days of app uninstallation
• You may contact us to request deletion of specific data at any time

7. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“Right to be Forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at [Your Contact Email]. We will respond within 30 days.

8. Your Rights Under CCPA (California)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, or disclose
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell data)
• Not be discriminated against for exercising your rights

To exercise these rights, email us at [Your Contact Email] with “CCPA Request” in the subject. We will verify your identity and respond within 45 days.

9. Children’s Data

Simplify is not intended for children under the age of 13. We do not knowingly collect or solicit personal information from children.

10. International Transfers

Our servers may be located in the United States or other jurisdictions. By using Simplify, you consent to the transfer of your data outside of your country of residence, where data protection standards may differ.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new effective date. Your continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns regarding this policy or your data rights, please contact us at:

Email: [email protected]