Privacy Policy
What we collect
- Account data — name, email, password hash.
- Store configuration — your store domain, Storefront API access token, app branding and assets. Storefront tokens and keystore passwords are encrypted at rest (AES-256-GCM) and used only to build and verify your app.
- Build data — build logs and compiled artifacts, retained to support you and debug failures.
- iOS waitlist — the email you optionally submit.
What we never see
Payment card details go directly to Polar.sh, our merchant of record — they never touch our servers. Your customers' data stays between your app and Shopify; our servers are not in your app's runtime path.
Processors we use
- Polar — payments, invoicing, tax (merchant of record)
- Resend — transactional email
- Our own servers — builds, artifact storage, keystores
What we don't do
We don't sell your data, run third-party advertising trackers, or use your store credentials for anything except building and testing your app.
Cookies
Session cookies for login only. No advertising or cross-site tracking cookies.
Retention and deletion
Account and store data are kept while your account exists. Email support@shopimob.cloud to delete your account — we remove your data within 30 days, except signed artifacts and keystores you ask us to hand over first, and records we must keep by law.
Contact
Privacy questions: support@shopimob.cloud