Privacy & Data Handling

This page describes how the IFG Build Your Box app collects, uses and retains data. It documents the app’s technical behavior; it is not a substitute for IFG eCommerce’s company-wide privacy policy, and it is not legal advice.

What is collected

Order lines, no customer details. To show box sales in Analytics, the app reads the store’s orders from the last 60 days, limited to products, quantities and line amounts. It does not read customer names, emails, phones or addresses, and it does not store orders: totals are calculated each time you open the page. In the storefront, the builder only sends the product variants the shopper selected to the Shopify cart.

About the merchant’s store, the app processes:

• the store domain and the Shopify access tokens needed to run the app (tokens are encrypted at rest with AES-256-GCM);
• the box configurations (name, price, selected products and collections, rules, appearance). These are stored in your Shopify store as app-owned data, not in our database;
• the admin language you choose and monthly counters of Help messages;
• messages you send from the Help page: the text you write, your store domain and, for support requests, your store contact email as the reply address. For feedback, an email address only if you choose to enter one.
• the store name and the email address of the store owner’s Shopify account, read from the Shopify Admin API at install time only to send the welcome email (see Welcome email); the address is not kept in our records (it remains in Resend’s delivery logs for the period set by the provider).

Why it is collected

• To run the app: create and publish boxes and enforce their rules in the cart.
• To answer your support requests and read your feedback.
• To show box sales in Analytics (boxes sold, revenue, most chosen products).

Who it is shared with

• Shopify — the app runs inside Shopify and uses the Shopify Admin API.
• Google Cloud — hosting and database (Firestore), region europe-west1 (Belgium).
• Resend — email delivery provider based in the United States, used to deliver Help messages to IFG eCommerce and the welcome email. Transfers rely on the safeguards of the provider’s DPA: the EU Standard Contractual Clauses (Decision 2021/914) and the provider’s EU-U.S. Data Privacy Framework certification.

No AI provider is used. Data is not sold or used for advertising.

Welcome email

After a new installation we send one single welcome email to the email address of the store owner’s Shopify account, which we read from Shopify’s Admin API at install time (the public contact email of the store is never used). We also read the store name, to address you.

The email is sent by Francesco Guiducci (IFG eCommerce), thanks you for installing the app, introduces him as its freelance developer and invites you to reply with any question. It is a service message, not a newsletter or a promotion, and nothing else is sent afterwards. It is delivered through Resend (see Who it is shared with).

Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, for the introduction, legitimate interest (Art. 6(1)(f) GDPR). You can object at any time by replying, using the unsubscribe link in the email, or writing to info@ifgecommerce.com. The owner’s email address is not kept in our records (it remains in Resend’s delivery logs for the period set by the provider).

After uninstall and the erasure request (shop/redact) we keep only a minimal record: the store’s .myshopify.com domain, the sending status with dates and, for anyone who unsubscribed, the date of the objection and a keyed cryptographic fingerprint (HMAC-SHA256) of the address. The fingerprint is pseudonymised, not anonymous, and only prevents sending again and honours the objection (Art. 21 GDPR). It is deleted after 24 months.

Retention

• When you uninstall the app, its access tokens are deleted immediately.
• Box configurations stored in your Shopify store follow Shopify’s handling of app data on uninstall; box products remain in your catalog and cannot be bought on their own without the app.
• When Shopify sends the store data erasure request (normally 48 hours after uninstall), all remaining data about your store is deleted from our database. The only exception is the minimal welcome-email record described in the Welcome email section.
• Help emails are kept in the IFG eCommerce mailbox as long as needed to handle the request.

Security

• Shopify access uses expiring offline access tokens, refreshed automatically.
• The database is reachable only through the app’s own backend service identity; there is no public read or write access.

Questions or requests

For access or erasure requests write to info@ifgecommerce.com. Data controller: IFG eCommerce, sole proprietorship of Francesco Guiducci, Rome, Italy.