Privacy policy

Almanary is a Shopify app that lets a store build discounts, test them against the store's own past orders, and run them in Shopify's checkout. This policy explains what data the app and this website handle, why, for how long, and what your rights are. It is written for three readers: merchants who install the app and the staff who use it, customers of those stores, and visitors to almanary.com.

One distinction runs through it. For the order data your store shares with the app, your business is the controller and we act on your instructions. For this website and for the records we keep to run the app, Almanary ApS is the controller.

1. Who we are

Almanary ApS, CVR 46746023, Ørestads Boulevard 56, 5. th., 2300 København S, Denmark. Write to support@almanary.com for anything in this policy.

2. The app and your store's data

What the app reads. Through Shopify's Admin API, with the access you grant when you install the app: your orders' economics (line items, prices, currencies, dates) and the customer attributes a discount can condition on, such as customer tags (labels your store assigns), order count, logged-in state and country code. We ask Shopify only for what a discount needs. Shopify's access controls withhold customer names, email addresses, phone numbers and street addresses from the app: we have not asked for those fields, and Shopify returns them empty to apps that have not. The exact list of what the app requests is shown by Shopify when you install it. It asks you for nothing about yourself; what you type into a discount is your store's configuration.

Why. Two purposes: to test a draft discount against your past orders before it goes live, and to show you what a discount did. Nothing else. We do not sell this data, share it beyond the companies listed in section 5, use it for advertising, or use it to train models.

What the app keeps. Full order data is read for a test run, replayed in memory and dropped. A run keeps its report and a small set of example order rows: the order's identifier and display name, its currency, its subtotal, the discount amount the run computed, whether a shipping discount also applied, and which part of the report the order illustrates. These rows carry no customer name, email, phone number, address or payment details. They exist so you can see why a run produced its figures and so we can answer a data request about a specific order. They are erased with the run, when you delete the discount, and on a redaction request from Shopify.

Your role and ours. Your business is the controller of your store's data. We process it on your instructions, only for the purposes above, and only through the companies listed in section 5. Our data processing agreement sets out the terms on which we do so.

If you are a customer of a store that uses Almanary. The store is responsible for your data and is your first contact. The app collects nothing from you directly and places nothing on your device; a discount runs inside Shopify's checkout and sends nothing to us. Requests to see or erase your data go to your store. Shopify passes them to us on the store's behalf; we send the store what we hold and erase what it asks us to, and we never contact you ourselves. Shopify's requests can carry your email address or phone number; we use them only to find the records the request names and do not keep them.

Uninstalling. Removing the app revokes its access at once and clears your store's credentials. Everything read from your orders, including the example order rows a run keeps, is erased when Shopify sends its redaction request, 48 hours after uninstall, and in any event within 30 days. If you reinstall the app, it starts from whatever data remains; anything erased is not restored. Your exportable data (what you entered and the reports the app produced for you) stays retrievable for 30 days after you uninstall, as the terms say, and is then erased.

Security. Store credentials are encrypted at rest, every store's data is isolated from every other store's, and every connection is encrypted in transit.

3. Records we keep to run the app

To run the app we keep a few records of our own, obtained from Shopify when you install and use it: which store the app is installed on and the credentials Shopify issues for it; the facts Shopify reports about your plan, so the app shows what your plan allows; which staff account saved a version or started a test run, so your change history is attributable; technical logs of requests to our servers, to keep the service running and to investigate problems; and a record of the erasures we have carried out, so we can show they happened and never knowingly restore an erased order.

We keep these on the basis of our legitimate interest in running a secure and attributable service (Article 6(1)(f) of the GDPR). Store records are kept while the app is installed and erased with your store's data after uninstall. Logs are kept only as long as we need them to run the service and investigate a problem, and are then deleted. The record of erasures holds which store, what was erased and when, and no customer data; it is kept for 3 years after the erasure. You can object to this processing; see section 7.

4. This website

almanary.com sets no cookies. If you pick a theme, that choice is kept in your browser's local storage as a setting; it identifies nothing and is never sent to us. It runs no tracking, no third-party scripts and no externally hosted fonts. Our host handles the technical data of each request (your IP address, the page, the time) to deliver the site, protect it from abuse and diagnose errors, on the basis of our legitimate interest in running a secure and reliable website (Article 6(1)(f)); the host keeps those request logs only as long as it needs to deliver and protect the site, and we see aggregate traffic counts and request logs, which are kept no longer than 12 months for those purposes.

Early access. If you ask for early access, we store your email address, the time you asked and the wording you agreed to, and we use them to email you about your early access and about Almanary. We do this on the basis of your consent (Article 6(1)(a) of the GDPR). You can withdraw it at any time with the unsubscribe link in any of these emails or by writing to support@almanary.com; we then stop and delete the address. We also delete it if 12 months pass without an email from us. Asking is voluntary, and without an address we cannot invite you. We keep a record that you agreed, and of the wording you saw, for 2 years after the last email we sent you, so that we can show you agreed.

Correspondence. When you write to support@almanary.com, we keep the message and your address to answer you and to keep a record of what was asked, on the basis of our legitimate interest in handling requests (Article 6(1)(f)). We delete a thread 12 months after its last message.

5. Who processes data for us

Some of the companies that store or handle data for us are outside the European Economic Area (the EU, Norway, Iceland and Liechtenstein). The current list, with what each does for us and where it processes data, is at almanary.com/subprocessors. Where a company is outside the EEA, the transfer rests on an adequacy decision of the European Commission where one covers the company (today the EU-US Data Privacy Framework, for companies certified under it), and otherwise on the standard contractual clauses the Commission has adopted; a copy of the clauses we rely on is available on request at support@almanary.com. We share personal data with no one else, except where the law requires it.

Shopify is the platform your store runs on, not our processor. What Shopify does with your data is governed by Shopify's own privacy policy.

6. Automated decisions

We make no decisions about you by automated means that have legal or similarly significant effects. Discounts run inside Shopify's checkout on the rules your store configured; those are your store's decisions.

7. Your rights

8. Changes

This policy changes when what we do changes. The date at the top says when.