EasyMetrik (“the App”, “we”, “us”) is a Shopify app operated by EasyMetrik. It helps merchants send storefront and order events to Google Analytics 4 (GA4), Google Tag Manager (GTM) and Meta (Facebook) Pixel / Conversions API. This policy explains what data we handle and why.

1. Who this applies to

• Merchants who install the App.
• Merchants’ customers whose order and browsing events are processed on the merchant’s behalf. For customer data, the merchant is the data controller and we are the processor (service provider).

2. Data we collect

From merchants

• Shop domain and Shopify access token, which Shopify provides at install.
• Tracking settings: GA4 Measurement ID and API secret, Meta Pixel ID, Meta Conversions API access token, Meta test event code, GTM container ID, and enabled-event preferences.
• If the merchant connects Google: Google account email, GA4 property details and an OAuth refresh token.
• Billing plan and subscription status, handled through Shopify Billing. We do not see payment card details.

From merchants’ customers (processed for the merchant)

• Order webhooks (orders/paid, orders/fulfilled, orders/cancelled, refunds/create): order ID, totals, currency, line items, and, where Shopify makes it available, email, phone, name, address and customer ID.
• Storefront web pixel events: page, product, cart and checkout events, plus browser identifiers (Meta fbp/fbc cookies, user agent, page URL).
• Email, phone, name and address are SHA-256 hashed before they are sent to Meta, as Meta requires.

We access customer data only to the extent Shopify permits under its protected customer data requirements.

3. How we use data

• To deliver events to GA4, GTM and Meta as configured by the merchant.
• To de-duplicate events and retry failed deliveries.
• To show the merchant an event log and diagnostics, and to enforce plan usage limits.
• To provide support, secure the service and meet legal obligations.

We do not sell personal data, use it for our own advertising, or use it for profiling or automated decisions with legal or similarly significant effects.

4. Consent and opt-outs

The storefront pixel runs under Shopify’s Customer Privacy API. It respects each customer’s analytics, marketing and data sale consent choices, and no events are collected for customers who decline. Merchants remain responsible for their own cookie banners and lawful basis.

5. Who we share data with

Data is shared only as the merchant configures:

• Google (GA4 / GTM) and Meta (Pixel / Conversions API), which receive the events and, for Meta, hashed customer identifiers. Their own privacy policies apply to their use of the data.
• Infrastructure providers that host the App and database (e.g. Railway) and Shopify.

We do not share data with anyone else except where required by law.

6. Storage, security and retention

• All traffic uses HTTPS/TLS. Data is stored in an encrypted-at-rest managed database.
• Meta and GA4 secrets and Google refresh tokens are additionally encrypted (AES-256-GCM) in our database, and are masked in the App interface.
• Event logs are kept for [30/60/90] days and then deleted. Settings are kept while the App is installed.
• On uninstall, sessions are deleted immediately. We delete all shop data on Shopify’s shop/redact request (about 48 hours after uninstall). Customer data is erased on customers/redact requests, and we respond to customers/data_request requests.

7. Your rights

Depending on where you live (e.g. GDPR, UK GDPR, CCPA/CPRA), you may have the right to access, correct, delete or restrict your data, to object to processing, and to opt out of the sale or sharing of data. Customers should contact the merchant first. You can also email us at [SUPPORT EMAIL], and we will assist the merchant within the required timeframes.

8. International transfers

Data may be processed outside your country, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Children

The App is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy and will change the date above. Material changes will be communicated through the App or by email.

11. Contact

Email: support@easymetrik.com