Effective Date: 1 Sep 2025
Last Updated: 1 Sep 2025
At Proofly (a product of EngagePilot, accessible via engagepilot.io), we value your privacy and are committed to protecting both merchant and customer data. This Privacy Policy describes our data practices, your rights, and how we comply with Shopify’s requirements for protected customer data and billing scopes.
1. Information We Collect
a) Merchant / Store Data
- Shopify store name, domain, admin contact, configuration settings
- Billing and subscription data via Shopify’s billing APIs (e.g. invoices, plan status)
- Usage logs, performance metrics, app settings
b) Customer Data / Protected Data
To deliver aggregated social proof features, Proofly may access limited customer data via the read_customers scope, including:
- Counts of orders, total spend aggregates (for display, e.g. “X customers bought this product”)
- We do not display or expose individual customer PII (name, email, address) to other merchants or users
We request only the minimum level of customer data required to provide the app’s features, in accordance with Shopify’s protected customer data guidelines.
2. Billing & Payment Information
- Proofly uses Shopify’s billing APIs to manage subscription charges, app billing, and plan management.
- Payment card data (e.g. card numbers, CVV) is never collected or stored by Proofly.
- We retain billing records (invoices, plan history) only as needed for accounting and legal compliance.
3. How We Use Data
We use collected data for these purposes:
- To power Proofly’s social proof features (visitors, add-to-carts, sales counts)
- To create aggregated analytics and reporting for merchants
- To enforce subscription access and billing
- To detect misuse, fraud, or abnormal behavior
- To comply with legal obligations and Shopify’s app review policies
4. Data Storage, Security & Retention
- All data is encrypted in transit (TLS) and at rest with industry-standard encryption.
- Access is limited via role-based permissions; only authorized team members can access sensitive data.
- We maintain logs and audit trails of data access.
- Retention periods (subject to change based on your implementation):
- Customer activity and aggregated data: retained for up to 90 days
- Merchant billing and usage history: retained for up to 2 years (or longer if legally required)
- Uninstalled or terminated merchants may request full deletion of their data.
- We will honor data erasure / redaction webhooks from Shopify (e.g. customers/redact, shop/redact) to remove or anonymize relevant data.
5. Compliance & Webhooks
Proofly complies with Shopify’s protected customer data requirements. Specifically:
- We subscribe to Shopify’s mandatory compliance webhooks for data erasure or redaction.
- When we receive a webhook to erase or redact data, we process it promptly (within 30 days) to delete or anonymize that data.
- We support merchants in fulfilling data subject requests (access, correction, deletion) in compliance with GDPR, CCPA, or other applicable privacy laws.
6. Third-Party Services & Data Sharing
We may use third-party service providers (for hosting, analytics, logging, email) under contract. These providers access only the data needed to perform their services.
We do not sell or share customer data for marketing or advertising purposes.
7. International Data Transfers
If Proofly stores or processes data outside the merchant’s country, we ensure appropriate safeguards (e.g. standard contractual clauses, whatever legal basis required) to comply with applicable data protection laws.
8. Your Rights & Choices
Merchants and customers may request:
- Access to their personal data
- Correction of data
- Deletion or anonymization of data
- Withdrawal of any consent (where applicable)
To make a request, contact us at engagepilotapp@gmail.com. We will respond within 30 days.
9. Updates to This Policy
We may update this Privacy Policy sometimes. We’ll publish a new “Last Updated” date and notify merchants via email or in-app notification. Continued use of the app after changes indicates acceptance.
10. Contact Information
If you have any questions or concerns, contact us:
📧 engagepilotapp@gmail.com