Ploqo Vouchers Privacy Policy

1. Introduction

Ploqo Vouchers ("we", "our", or "us"), listed in the Shopify App Store as Ploqo Vouchers: Next Order, is a Shopify app made by the team behind PinFlow. It gives your customers coupon codes for their next order, shown in your store's own shipping email. This policy explains what information the app accesses and stores when a merchant installs it, and how that information is used.

2. Information We Access

• Store information: your shop's myshopify domain, currency, time zone, the money format of your emails and your Shopify plan name. Also the access tokens Shopify issues to the app, and the details Shopify attaches to the session of the staff member who opens the app (such as their name, email address and whether they own the store).
• Orders (the read_orders permission): the order's number and name, its subtotal and currency, its fulfilment, payment, refund and cancellation status, and the id of its customer. The subtotal decides how many codes the order earns, and the order number names them.
• Order email events: to show you whether a customer was sent their Shipping confirmation, the app reads the order's "email sent" events. Shopify writes these with the customer's name and email address. The app checks the text, keeps only a yes or no, and drops the text. It is never stored, logged or shown.
• Customers (the read_customers permission): from the customer record, the app reads the customer's id and no other field. The app needs this permission to send your Shopify Flow workflow a reference to the customer whose codes are about to expire, which Flow requires this permission for. The app also uses the id to limit each code to the order's customer.
• Discount codes: the codes the app created (code, value, minimum order, end date, how often used, and the customer they are limited to), to show their status and send reminders.

The app does not request customers' names, email addresses, phone numbers or postal addresses from Shopify, and does not read payment details such as cards or transactions. Shopify's order notifications (when an order is fulfilled, refunded or cancelled) reach our server with the order or the refund; the app reads only the order's id and name from them and keeps none of the rest. Shopify's privacy requests (a customer asking for their data, or for it to be deleted) carry the customer's email address and phone number; the app reads only the customer id and order ids from them, and does not store or log the rest.

3. What the App Writes to Your Store

• Discount codes: one code discount per voucher, named after the order (for example BB-1042-1), limited to the order's customer, usable once, with your minimum order and an end date. When a refund or cancellation means an order earns fewer codes, the app ends the extra codes and marks them as voided.
• Shop metafields: your voucher rule and the app's status timestamp, in the bounceback namespace, with their metafield definitions.
• Shopify Flow events: when codes are about to expire, the app sends your Shopify Flow the "Voucher codes expiring" trigger: the customer reference, the unused codes, how many there are, the days left, the voucher value, the expiry date and the order name.
• Customer metafield: if you use the reminder workflow the app provides, your own Flow workflow (not the app) saves the expiring codes on the customer, in bounceback.expiring_codes, so your reminder email can print them.

4. What We Keep on Our Servers

Your voucher rule and the codes live in your Shopify store. On our own servers we keep only what the app needs to run:

• Your shop domain, whether the app is installed, and the app's own settings and status (for example when vouchers were paused, and whether a reminder workflow is on in Flow).
• The Shopify sessions described above. They are encrypted before they are stored.
• Bookkeeping about orders: orders whose codes could not be created or voided, orders fulfilled while vouchers were paused, and a log of reminders sent to Flow. These hold the order name and number, code counts, statuses and times. They hold no customer name, email address, phone number, postal address or customer id.
• Server logs and error alerts, used to find and fix errors. They can contain your shop domain, an order name or number, and a customer id. The app does not write a customer's name, email address, phone number or postal address to them.

5. Email and Sharing

The app sends no email. The codes reach your customers in your own Shopify Shipping confirmation email. Reminders are sent by your own Shopify Flow workflow, through Shopify Messaging or Klaviyo, which are your own accounts. The app does not receive those emails.

We do not sell your data. Our team receives alerts through a messaging service. An alert is sent when the app hits an error, and carries the error text described above. One is also sent when a shop installs or uninstalls the app, and carries the shop domain and the time.

The app runs on a server we manage, reached through Cloudflare, which carries the app's traffic. We use service providers, such as Cloudflare and our hosting company, to host and operate the app. They process data only on our behalf.

6. Data Retention and Deletion

• When you uninstall the app, we delete its Shopify sessions at once.
• Shopify asks us to delete a shop's data 48 hours after uninstall. We then delete every row we hold for your shop.
• When Shopify asks us to delete a customer's data, we delete our bookkeeping for that customer's orders. A reminder-log row is kept only when Shopify can't tell us the order's number. It holds no personal field, and it is deleted with the rest of the shop's data after uninstall.
• The app does not delete the discount codes and metafields it created in your Shopify store. Once the app is uninstalled, it can no longer reach your store.