Beacon Wave Studio ("we", "us", "our") builds applications for the Shopify platform (the "Apps"). This policy explains what information we collect when a merchant installs one of our Apps or visits this website, how we use it, and the choices available to you. It applies to all Apps we publish unless an App ships with its own policy.
1. Information we collect
When you install an App, we receive information from Shopify through the permissions (API access scopes) you grant during installation. Depending on the App this may include:
- Store information: store name, myshopify domain, email address, currency, timezone, plan and locale.
- Store content: products, collections, inventory, discounts, themes or other data the App needs to perform its function.
- Order and customer information: only if the App's function requires it, and only the fields necessary. This can include names, email addresses, shipping/billing addresses, phone numbers and order details of your customers.
- App settings and usage: the configuration you choose in the App and technical logs (timestamps, IP addresses, request identifiers, error reports) generated when the App is used.
Each App's listing on the Shopify App Store lists the exact access scopes it requests. We only request the access the App needs.
On this website we do not use analytics or advertising cookies. Our web server keeps standard access logs (IP address, user agent, pages requested) for security and troubleshooting.
2. How we use information
- To provide, operate and maintain the App and its features.
- To respond to support requests and communicate about the App (service notices, security alerts, changes to terms).
- To bill for the App through Shopify's billing system.
- To monitor performance, prevent abuse and fix bugs.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell personal information, and we do not use merchant or customer data to build advertising profiles.
3. Sharing information
We share information only with:
- Shopify, as required for the App to function on the platform and as described in Shopify's own privacy policy.
- Infrastructure providers that host our servers and databases and deliver email, under contracts that limit their use of the data to providing services to us.
- Authorities, when we are legally required to do so or to protect our rights, our users or the public.
- A successor in the event of a merger, acquisition or sale of assets, in which case this policy continues to apply.
4. Data retention
We keep merchant data only for as long as the App is installed and for the period needed to fulfil the purposes above. When an App is uninstalled, Shopify notifies us and we delete the store's data within 48 hours after the mandatory waiting period Shopify requires, unless we must retain some records for legal, tax or accounting reasons. Technical logs are kept for a maximum of 90 days.
5. Shopify mandatory privacy webhooks
Our Apps implement the compliance webhooks Shopify requires from every public app:
customers/data_request: when a customer asks a merchant for their data, we provide the merchant with the personal data we hold for that customer.customers/redact: when a merchant requests deletion of a customer's data, we erase the customer's personal data from our systems.shop/redact: 48 hours after an App is uninstalled, we erase the store's data from our systems.
6. Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or delete the personal information we hold about you, and to object to certain processing. Merchants can exercise these rights for their store directly from the Shopify admin (which triggers the webhooks above) or by writing to us. Customers of a store should contact the merchant, who acts as the data controller; we assist merchants with such requests as their processor.
If you are in the European Economic Area or the United Kingdom, we process data on the merchant's behalf under Article 28 GDPR and rely on the merchant's instructions as the legal basis. If you are in California, we do not sell or share personal information within the meaning of the CCPA/CPRA.
To exercise any of these rights email privacy@beaconwavestudio.com. We answer within 30 days.
7. Security
All traffic between Shopify, our servers and your browser is encrypted with TLS. Access tokens and databases are encrypted at rest, access is limited to the people who operate the App, and we follow Shopify's app security requirements. No method of transmission or storage is completely secure; if we become aware of a breach affecting your data we will notify you and Shopify without undue delay.
8. International transfers
Our servers may be located outside your country. Where required, we rely on standard contractual clauses or equivalent safeguards for cross-border transfers.
9. Children
Our Apps and this website are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and change the "last updated" date. For material changes we will also notify merchants through the App or by email.
11. Contact
Beacon Wave Studio
Email: privacy@beaconwavestudio.com
Website: beaconwavestudio.com