Privacy Policy

Last updated: 31 May 2026

This Privacy Policy explains how Gluesale (“Gluesale,” “we,” “us”) collects, uses, and protects information when a merchant installs and uses the Gluesale referral marketing application (the “App”) on their Shopify store.

1. Information we collect

To operate the referral program, the App accesses and stores the minimum data necessary, including:

• Store information — your shop domain, store name, and contact email.
• Customer information — customer email addresses and Shopify customer identifiers for customers who participate in referrals.
• Order information — order identifiers and applied discount codes used to attribute referrals and conversions.
• Referral and billing records — referral links, generated discount codes, conversion status, and usage charges.

2. How we use information

We use this information solely to provide and operate the App: generating referral links and discount codes, attributing conversions, sending referral and reward emails, displaying analytics in your dashboard, and calculating usage-based billing.

3. Permissions

The App requests only the Shopify access scopes it needs: read customers, read orders, and write discounts. We do not request access beyond what the referral program requires.

4. Subprocessors

We rely on trusted third-party providers to deliver the service, including Shopify (platform and billing), Resend (transactional email delivery), and our hosting and database infrastructure providers. These providers process data only as needed to perform their services.

5. Data retention and deletion

We retain data for as long as the App is installed and as needed to provide the service. The App honors Shopify’s mandatory compliance webhooks: customers/data_request, customers/redact, and shop/redact. When you uninstall the App or a redaction request is received, associated data is deleted in accordance with those requests.

6. Data security

We use industry-standard measures to protect data in transit and at rest. Access tokens and customer data are stored securely and access is restricted.

7. Your rights

Depending on your jurisdiction, you and your customers may have rights to access, correct, or delete personal data. Merchants can trigger customer data requests and redactions through Shopify, and may contact us directly for assistance.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date above.

9. Contact

Questions about this policy or your data? Email us at privacy@gluesale.com.

This document is provided for general informational purposes and does not constitute legal advice. Please have it reviewed by qualified counsel before relying on it for compliance.