Privacy Policy

1. Introduction

Tapmerce, operated by Eiad Oraby("we," "our," or "us" — see our Imprint), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application and related services (collectively, the "Service").

2. Information We Collect

2.1 Merchant Information

When you install Tapmerce on your Shopify store, we collect:

• Store name and domain (myshopify.com URL)
• Shopify store owner contact information
• Storefront API access token
• App configuration data (branding, sections, navigation preferences)
• Build request details (app name, icons, developer account information)

2.2 End User (Customer) Information

When customers use your mobile app, we collect:

• Device push notification tokens (for sending push notifications)
• Device type and operating system version
• App usage analytics (screen views, session duration)
• AI chat conversation data (only for AI Chat App users)

We do not collect payment information, passwords, or personal identification documents. All payment processing is handled by Shopify.

2.3 Automatically Collected Information

• IP addresses (anonymized after 30 days)
• Browser type and version (for web analytics)
• Referring URLs
• Pages viewed on tapmerce.ai

3. How We Use Your Information

• To provide, maintain, and improve our Service
• To build and publish your mobile app
• To deliver push notifications on your behalf
• To power AI chat shopping experiences
• To provide customer support
• To send administrative communications about the Service
• To analyze usage patterns and improve our products
• To comply with legal obligations

4. Data Sharing

We do not sell your personal information. We share data only with:

• Shopify: As required by Shopify's platform and API terms
• Apple & Google: App Store and Play Store submission data
• Expo (EAS): Build service for compiling mobile apps
• AI Providers: Chat conversation data for AI processing (anonymized)
• Analytics: Aggregated, anonymized usage data

5. Data Retention

We retain merchant data for the duration of your subscription plus 90 days. Push tokens are deleted within 30 days of app uninstallation. AI conversation data is retained for 12 months to improve recommendations, then anonymized. You may request earlier deletion at any time.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at [email protected].

8. GDPR Compliance

For EU/EEA residents: We process data under the legal bases of contract performance, legitimate interest, and consent. Our Data Processing Agreement (DPA) is available at tapmerce.ai/dpa.

9. CCPA Compliance

For California residents: We do not sell personal information. You have the right to know what data we collect, request deletion, and opt out of any future sale of personal information.

10. Children's Privacy

Our Service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related inquiries:
Email: [email protected]
Website: tapmerce.ai