FORTY & FREE (IDOW) ("we", "us", "our") operates MDBadgePilot, a Shopify app that shows badges on product images. This page explains which data the app accesses, what it stores, and how it is deleted.
Data we access
When you install MDBadgePilot, the app accesses the following Shopify data through the Shopify API, with the scopes read_products, write_products, read_orders and read_reports:
- Store information: the shop domain
- Product data: ID, title, handle, prices and compare-at prices, inventory, tags, product type, vendor, creation date, and the product metafields you use in a badge condition (for example a review rating)
- Sales data: the number of orders per product over the period set in a sales condition, read as an aggregated Shopify report (Pro plan only). The app does not read individual orders
MDBadgePilot does not access or store any personal data of your customers: no names, emails, addresses or payment information.
How we use your data
We use the data only to:
- Evaluate your badge conditions against your products
- Write the badges to show in app-reserved Shopify metafields, read by your theme
- Show your badges and the products they apply to in the app
- Manage your plan through Shopify's billing system
Data we store
Our database stores:
- The Shopify session of your store: shop domain, access and refresh tokens, granted scopes
- Your plan (Free or Pro)
- Your badges: name, text, colors, shape, position, size, priority, schedule, mode and conditions
- For each product a badge applies to: the product ID, title and handle, and its current discount percentage and stock, used to fill the {discount} and {stock} variables
In your Shopify store, MDBadgePilot also writes app-reserved metafields: the design of the badges on the shop, and the list of badges on each product. The storefront reads them directly and never calls our server. The application and its database are hosted by Render Services, Inc. in its Frankfurt region (Germany, European Union). Our server logs may contain your shop domain and are kept for a limited time for troubleshooting.
Data sharing
We do not sell, trade or transfer your data to third parties. We do not use it for advertising, analytics or any purpose other than providing MDBadgePilot.
Data deletion
When you uninstall MDBadgePilot, all your data is deleted immediately from our database: badges, conditions, the list of badged products, your plan and the session of your store. Once the app is uninstalled, your theme no longer shows its badges.
Cookies
MDBadgePilot does not set cookies, in the app or on your storefront. Authentication in the Shopify admin is handled by Shopify's embedded app framework.
GDPR compliance
As a French company, we comply with the General Data Protection Regulation (GDPR). You have the right to access, rectify or delete your data at any time. Contact us at contact@fortyandfree.com to exercise these rights.
Changes to this policy
We may update this Privacy Policy. Changes are published on this page with a new date.
Contact us
For any question about this Privacy Policy, contact us at contact@fortyandfree.com.