Privacy Policy

PromoLock is operated by Akash Chaterjee, trading as WEBx47 (“we”, “us”, “our”), of Mansarovar, Jaipur, RJ, 302020, IN. PromoLock is a Shopify app that controls discount code and gift card usage at checkout and provides analytics to the merchants who install it.

For the personal data described below, the merchant who installs PromoLock is the data controller and we act as a data processor on their behalf.

Personal data we store. The only personal data we store is merchant account data — the name and email address of the store owner and staff, obtained through Shopify authentication, used to operate the app and provide support.

Order data we access. To provide analytics, PromoLock accesses order data, which can include customer details such as names and email addresses. From each order we store only non-identifying details — order ID, variant ID, discount amount, payment method, discount code, and title. We do not store customer names, email addresses, shipping addresses, or phone numbers; customer details are read only to produce analytics and are not retained.

Customer data we access. To let a merchant lock a gift card to a specific customer, PromoLock reads the merchant's existing customer records and, where the merchant chooses, creates a new customer record (such as name and email) on the merchant's behalf. This customer data is used only to set up the gift card lock; it is held in the merchant's Shopify store, not stored in PromoLock's own systems.

We use all of the above only to provide PromoLock's functionality — controlling discount and gift card usage and providing analytics to the merchant. We do not sell personal data or use it for any unrelated purpose.

Data we store is held in a database operated via PlanetScale and hosted on Amazon Web Services in the United States (region: us-east-1).

Merchant account data and the non-identifying order details described above are retained for the duration of the app installation. All data associated with a store is deleted when the merchant uninstalls PromoLock.

We rely on the following sub-processors to provide the service. Each processes personal data only as needed to support PromoLock:

• Amazon Web Services, Inc. — database hosting (United States)
• PlanetScale, Inc. — database platform (United States)
• Mantle — billing and subscription management (receives merchant account data such as email and store domain)
• Upstash, Inc. — background job scheduling and message queue (QStash), used to run PromoLock's scheduled and background tasks (United States)

Where personal data of individuals in the UK or EU is transferred to the United States or India, those transfers are made under appropriate safeguards, including the Standard Contractual Clauses adopted by the European Commission and their UK equivalent.

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and limiting the data we store to what each feature requires.

Individuals may exercise their rights — access, correction, and deletion — by contacting the merchant, who is the data controller. We assist merchants in responding to these requests and honour Shopify's mandatory data-deletion webhooks.

We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date.

Questions about this policy can be sent to akash@promolock.app