Ploqo Wishlist Privacy Policy

1. Introduction

Ploqo Wishlist ("we", "our", or "us"), listed in the Shopify App Store as Ploqo Wishlist: Save for Later, is a Shopify app made by the team behind PinFlow. It puts a heart on your product cards and product pages, so shoppers can save products and find them again on a wishlist page in your store. This policy explains what information the app accesses and stores when a merchant installs it, and how that information is used.

2. Information We Access

• Store information: your shop's myshopify domain and whether the app is installed. Also the access tokens Shopify issues to the app, and the details Shopify attaches to the session of the staff member who opens the app (such as their name, email address and whether they own the store).
• Customers (the write_customers permission): when a logged-in shopper saves or removes a product, Shopify tells the app that shopper's customer id. The app reads and writes that customer's wishlist and no other customer field.
• Products (the read_products permission): the id, handle, title and status of the products on a wishlist, to show them on the wishlist page and to you.

The app does not request customers' names, email addresses, phone numbers or postal addresses from Shopify, and does not read orders or payment details. Shopify's privacy requests (a customer asking for their data, or for it to be deleted) carry the customer's email address and phone number; the app reads only the customer id from them, and does not store or log the rest.

3. Guests and Logged-in Shoppers

A guest's wishlist is saved in their own browser, never on our servers. To show it, the wishlist page sends the saved product ids to the app, which looks up those products and keeps nothing. When the guest logs in, their saved products are added to their account's wishlist.

A logged-in shopper's wishlist is saved in your store, on their customer record, in a customer metafield the app owns. A product is saved only when the shopper taps its heart.

4. What the App Writes to Your Store

• Customer metafield: each logged-in shopper's list of saved products (product ids only), with its metafield definition, named Wishlist.
• Theme: nothing. The hearts and the Wishlist button are a theme app embed and an app block that you turn on in your theme editor. The app does not edit your theme's files.

5. What We Keep on Our Servers

• Your shop domain, whether the app is installed, and the app's setup progress.
• The Shopify sessions described above. They are encrypted before they are stored.
• A count of saved products: one row per product a logged-in shopper saved, holding your shop domain, the customer id and the product id. It is used only to show you your most-saved products.
• Messages you send us through the app's chat with the developer, and our replies.
• Server logs and error alerts, used to find and fix errors. They can contain your shop domain and a customer id. The app does not write a customer's name, email address, phone number or postal address to them.
• Usage analytics on the app's own pages in your Shopify admin (which pages staff open and what they click), with the values Shopify adds to the app's address removed. These pages show no customer's personal details.

6. Email and Sharing

The app sends no email to you or your customers.

We do not sell your data. Our team receives alerts and your chat messages through a messaging service. An alert is sent when the app hits an error, and carries the error text described above. One is also sent when a shop installs or uninstalls the app, and carries the shop domain and the time.

The app runs on a server we manage, reached through Cloudflare, which carries the app's traffic. We use service providers, such as Cloudflare and our hosting company, to host and operate the app. They process data only on our behalf.

7. A Customer's Data Request

When a customer asks you for their data, open that customer in your Shopify admin and choose Block, then Wishlist. The Wishlist card names the products they saved and, when there are more than 8, links to a page in the app that lists all of them. Choose Pin to page for all staff to keep the card on every customer's page. The app holds nothing else about the customer beyond the count row and logs described above.

8. Data Retention and Deletion

• When a shopper removes a product from their wishlist, we delete its count row at once.
• When you uninstall the app, we delete its Shopify sessions at once.
• Shopify asks us to delete a shop's data 48 hours after uninstall. We then delete every row we hold for your shop, including the counts and the chat messages. If you installed the app again within those 48 hours, we keep your rows, because you are using the app again.
• When Shopify asks us to delete a customer's data, we delete that customer's count rows and, while the app is installed, their wishlist in your store.
• Saved wishlists stay on your customer records after you uninstall the app, like the rest of your store's data. Once the app is uninstalled, it can no longer reach your store.