Security

AndOr collects the minimum it needs to run, and protects what it keeps. For the full details, read the privacy policy.

Encryption

• Data is encrypted in transit between Shopify, your storefront and the app.
• Data is encrypted at rest where we store it.

Access

• Access to production systems is limited to authorized personnel.
• The access tokens that connect AndOr to your store are stored securely.

Data we never collect

• Your customers’ names, emails, phone numbers or addresses.
• Payment details. Billing is handled by Shopify.

Checkout rules check the cart and the buyer inside Shopify checkout, and return only a result. That buyer data is not sent to AndOr.

Data we keep, and why

• Orders: AndOr reads your store’s orders. Shopify asks you to approve this when you install. AndOr uses it to bill you by your store’s orders a month and to show Analytics.
• Order count: for other orders, only your store’s count of orders that month, to bill you. The order id is kept for 7 days so no order is counted twice. No other order details are kept.
• Order records: identifiers, dates, money and quantities for orders with an AndOr offer or discount, to show your results. Kept for 90 days, then deleted.
• Storefront events: anonymous views, clicks and adds, sent only after the shopper allows analytics.

See Privacy and data.

Deletion and GDPR

• AndOr handles Shopify’s mandatory privacy requests for customer data and store data.
• After you uninstall, Shopify asks AndOr to delete your store’s data, and AndOr deletes it.
• You can ask for deletion at any time. See the privacy policy.