Privacy

Who we are

Eversogood Web Services Pty Ltd. Contact us at support@eversogoodapps.com.

What the app collects

• Email addresses submitted to the popup. These go straight into the merchant's Shopify store as a customer with marketing consent.
• A masked copy of the last five addresses per store, so the merchant can confirm signups are arriving. Only the first and last character of the local part survive.
• Counts — how often the popup was shown, scratched, completed — by day and by theme. These are numbers, not people, and cannot be traced back to an individual.
• Store details: domain, name, timezone and currency, plus an encrypted access token so the app can create customers.

What it does not collect

No names, phone numbers, addresses or payment details. No tracking of shoppers across sites, no advertising identifiers, no third-party analytics on your storefront.

Who we share it with

Nobody. Data is not sold, rented or passed to advertisers. The app runs on Cloudflare Workers and stores its records in Cloudflare D1; Cloudflare processes that data on our behalf and nothing else.

How long it is kept

Masked signups are kept only as the most recent five per store. Aggregate counts are kept while the app is installed. When a merchant uninstalls, Shopify sends a redaction request and everything belonging to that store is deleted.

Erasure requests

When Shopify asks us to erase a specific customer, we delete any masked record matching that address. Requests can also be made directly to support@eversogoodapps.com.

Security

Access tokens are encrypted at rest, so a database dump alone cannot act on a store. Every request from Shopify is signature-verified before it is read. Every read and write is scoped to a single store by construction.