← Coffee Combo Discounts

Privacy Policy — Coffee Combo Discounts

Effective date: July 9, 2026

Coffee Combo Discounts ("the App") provides configurable combo discount codes for Shopify stores. This policy describes what information the App processes when a merchant installs it, and the rights merchants and their customers have over that information.

Information we collect

When you install the App, we store only what is required for the App to operate:

• Store identification and access tokens — your store's .myshopify.com domain and the OAuth access token Shopify issues to the App, used solely to call Shopify's Admin API on your behalf (creating and managing the discounts you configure).
• Discount configuration — the combo rules you create (products, quantities, discount percentage, shipping method). This data is stored inside your own Shopify store as metafields on the discounts themselves, not on our servers.

We do not collect, store, or process customer personal data. Discount eligibility is evaluated by a Shopify Function that runs entirely on Shopify's infrastructure during checkout; cart contents never reach our servers.

How we use information

Access tokens are used exclusively to provide the App's functionality — creating, updating, listing, and deleting the discounts you configure. We do not sell, rent, or share any information with third parties for marketing purposes.

Where information is stored

Session tokens are stored in a managed PostgreSQL database (Neon) behind our hosting provider (Vercel). Both providers maintain industry standard security certifications. All data in transit is encrypted with TLS.

Data retention and deletion

• When you uninstall the App, your access tokens are deleted immediately upon receipt of Shopify's app/uninstalled webhook.
• We honor Shopify's mandatory privacy webhooks: customers/data_request, customers/redact, and shop/redact. Because we store no customer personal data, customer data requests have nothing to report and customer redaction requests have nothing to delete; shop redaction removes any remaining store records within the required timeframe.
• Discount configurations live in your store's own metafields and are removed by Shopify together with the App's discounts when the App is uninstalled.

Your rights

Depending on your location (including under GDPR and CCPA), you may have rights to access, correct, or delete personal information. Given the minimal data the App stores, most requests are satisfied by uninstalling the App. For anything else, contact us and we will respond within 30 days.

Changes to this policy

We may update this policy as the App evolves. Material changes will be reflected on this page with an updated effective date.

Contact

Questions about this policy or your data can be sent through the App's support contact listed on its Shopify App Store page.