Decimo Decimal Discounts ("the app") is a Shopify app that lets a merchant set the percentage value of discounts that already exist in their store to a decimal number. This policy explains exactly what the app stores, why, and how it is deleted.
What the app can access
The app requests two permissions and no others: read_discounts and write_discounts.
It therefore cannot read orders, customers, products, inventory, payments or any other part of the store. It never receives customer personal data of any kind, because it is not permitted to request it.
What the app stores
| Data | Why |
|---|---|
| Store domain and email on the store account | To identify the store and contact its owner about the app |
| Access token issued by Shopify | To read and update discounts on the store's behalf |
| Discount edit history: discount name and id, previous value, new value, result, time | To show the activity log and let the merchant export it |
| A monthly count of edits | To apply the free plan limit |
| Subscription records: plan, status, amount, dates | To manage billing, which is processed entirely by Shopify |
Payment card details are never seen or stored by the app. All charges are handled by Shopify and appear on the merchant's regular Shopify invoice.
Sharing
Stored data is not sold, rented or shared with advertisers or data brokers. It is shared only with the hosting provider that runs the app's server and database, and with Shopify, in order to make the changes the merchant asks for.
Retention and deletion
- On uninstall: the access token is erased immediately and the store record is deactivated, so the app can no longer reach the store. The edit history is kept briefly so that it is still there if the merchant reinstalls.
- On a deletion request: when Shopify sends the mandatory shop/redact request, usually 48 hours after uninstall, every record for that store is permanently deleted: the store record, the full edit history, usage counts and subscription records.
- Customer data requests: the app holds no customer data, so requests to access or erase customer information return nothing, because there is nothing to return.
Your rights
Depending on where the merchant is located, they may have the right to access, correct, export or delete the data described above, and to withdraw consent by uninstalling the app. Requests can be made at any time by emailing ashiktpi30@gmail.com, and are answered within 30 days.
Security
All traffic runs over HTTPS. Access tokens are short-lived and refreshed automatically, and are erased the moment the app is uninstalled. Access to the database is restricted to the app itself.
Changes
If this policy changes materially, the date above is updated and merchants with the app installed are notified by email.