Privacy Policy — Announcements

Last updated: June 25, 2026

Merchentia (“we”, “us”) operates the Merchentia: Announcements Shopify app (the “App”). This policy explains what data the App accesses, stores, and shares.

Summary

The App lets you create announcement bars and inline banners on your storefront. It stores the announcement settings you create (your content and how/where/when each one shows) and limited, non-identifying analytics (how many times each announcement was seen or clicked). It requests one read-only permission (read_products) solely so you can pick which products or collections to target. It stores no shopper personal data, never accesses your customers or orders, and is completely free — there is no billing and we never see any payment details.

What the App stores

Shop session credentials — an access token and basic shop identifiers (your *.myshopify.com domain), used to authenticate the App and operate the embedded admin.
Your announcement settings — the announcements you create: their text, custom HTML, image URLs, link URLs, colours and styling, placement, the pages/devices/audience you target, schedule, and (for the relevant types) countdown and free-shipping settings. This is your business content, which you choose to publish on your storefront.
Non-identifying analytics — to power the in-app analytics, the App records a daily count of impressions and clicks per announcement. These are aggregate counts only — we do not store shopper names, emails, accounts, IP addresses, or persistent tracking identifiers.
Shop settings — your chosen timezone and optional global CSS.
We store no shopper personal data, no payment details, no order information, and no Shopify customer accounts.

Permissions the App uses

The App requests a single, read-only Admin API scope: read_products. This is used only so you can browse and pick specific products or collections to target an announcement at. The App never writes to your store and cannot read your customers or orders.

How announcements reach your storefront

Your active announcement settings are delivered to your storefront as cached data through a signed (HMAC-verified) Shopify App Proxy request; the shopper’s browser then displays them.
For a free-shipping progress bar, the shopper’s browser reads the current cart total using Shopify’s own storefront cart endpoint (/cart.js) — this happens in the shopper’s browser and cart contents are not sent to us.
Impression and click events are reported back only as anonymous counts (an announcement id and the type of event), never tied to a shopper.
The embedded admin home performs a one-off, best-effort fetch of your storefront home page to check whether the App’s theme embed is enabled, so it can guide you. No shopper data is collected by this check.

Custom HTML & CSS

If you choose to use custom HTML or CSS in an announcement, it is sanitized on our servers before it is stored or shown — scripts, event handlers, and unsafe URLs are removed — to protect your storefront and your shoppers.

What the App does not do

It does not use the Script Tag API; all storefront code is a Shopify Theme App Extension that is removed automatically when you uninstall.
It does not collect shopper personal data, build shopper profiles, or sell data.
It does not process payments. The App is free; there is no subscription and we never see payment details.

Data sharing

We do not sell or rent your data. We share data only with the service providers needed to run the App: Shopify (installation and authentication) and our hosting and database providers (Render and Neon, which run the App and store your announcement settings and analytics counts). There are no other sub-processors.

GDPR / data requests

The App implements Shopify’s mandatory compliance webhooks:

customers/data_request — the App stores no shopper personal data, so there is nothing to provide; the request is acknowledged.
customers/redact — there is no shopper personal data to delete; the request is acknowledged.
shop/redact — deletes all of your shop’s stored data (announcements, targeting rules, settings, analytics counts, and the session record), sent ~48 hours after uninstall.

Uninstalling the App revokes its access immediately and removes its storefront code; your stored data is deleted on shop/redact.

Data retention & security

Your announcement settings and analytics are retained only while the App is installed and are deleted on uninstall (via shop/redact). Data is stored by our infrastructure providers using industry-standard security and access controls.

Contact

Questions about this policy or your data: ask@merchentia.com.