Get in touch

Privacy Policy — Shopify Apps
Last updated: July 25, 2026

Who we are

We are Ilmosys.

  • Website: ilmosys.com
  • Registered business name: Ilmosys Infotech LLP
  • GST number: 24AAGFI4435D1ZE
  • Registered office address: Kishorgadh, Idar, Gujarat – 383225, India

We don’t provide a phone number. For privacy or support questions, email: support[at]ilmosys.com

About this policy

This page explains how we protect the privacy of merchants who install our Shopify apps. It describes what information we collect through Shopify, what we may store so an app can function, how that information is used, how long it is retained, and how merchants can contact us with questions.

What information do we collect through Shopify’s APIs?

When you install one of our Shopify apps, we may collect and store related information such as:

  • Store ID / shop domain
  • Shop timezone and currency (when provided by Shopify)
  • Store owner or staff name and email (when provided by Shopify during install or login)
  • Session and authentication data required to keep the app signed in
  • App-specific store data that Shopify returns through the Admin API or webhooks, limited to the scopes you approve at install

The exact scopes and data fields depend on the app you install and are shown during the Shopify install permission screen.

What information do we collect directly from the merchant?

During installation, we typically rely on Shopify authentication. We may receive the merchant’s name and email address as part of the standard Shopify app install / session flow.

Inside an app, merchants may also create or upload content needed for that app to work (for example settings, rules, files, or configuration). That content is stored only to provide the app’s features for that store.

App-specific data

Some apps store additional information required for correct operation. Examples may include:

  • Configuration and preferences set by the merchant
  • IDs of products, collections, orders, or other Shopify resources selected in the app
  • Operational logs or analytics needed to display results inside the app dashboard
  • Files uploaded by the merchant for use inside the app

We only store what is reasonably necessary for the installed app to function.

What information do we collect about merchants’ customers?

Unless a specific app clearly states otherwise in its listing or in-app documentation:

  • We do not collect personal information about your storefront customers as a product feature
  • We do not add storefront tracking cookies, pixels, or scripts for our own advertising
  • We do not build customer profiles from your store’s shoppers

If an order or customer-related webhook is required for an app to work, payload data may pass through our systems temporarily. We only retain the fields needed to operate that app, and we do not use customer data for advertising.

How do we use the information we collect?

We use the information described above to:

  • Provide and maintain the features of the installed Shopify app
  • Authenticate merchants and keep the app working correctly
  • Process billing through Shopify Billing where a paid plan exists
  • Provide support and troubleshoot issues
  • Meet legal and Shopify compliance obligations (including privacy / GDPR webhooks)

We do not sell merchant or customer data.
We do not use store data for third-party advertising.
We do not share shop data with third parties for their own marketing purposes.

If we use limited service analytics (for example to understand general usage patterns or improve reliability), that data is used only to operate and improve our apps. We do not use it to sell your data.

How long do we store or retain data?

We keep data for as long as you continue to use the app and it is needed to provide the service.

When you uninstall an app:

  • We invalidate active sessions for that shop
  • After Shopify sends the required shop data deletion / redact request, we delete related shop data from our systems within Shopify’s required timeframe

Merchants can also delete certain app-created content from within the app while it remains installed, where that feature is available.

Shopify privacy / GDPR webhooks

Our Shopify apps implement Shopify’s mandatory compliance webhooks:

  • customers/data_request — we acknowledge the request and provide any customer personal data we hold for that shop, if any, within the required period
  • customers/redact — we delete customer personal data we hold for that request, within the required period
  • shop/redact — after uninstall, we delete the shop’s app data as required by Shopify

Where is data stored or processed?

Ilmosys Infotech LLP is registered in India. Our apps are hosted on cloud infrastructure, and databases or file storage may be located in regions outside India (for example the United States or other production hosting regions we use).

This means merchant data may be processed outside India, depending on the hosting region. Where required, we rely on appropriate safeguards and on Shopify’s platform terms that govern app access to merchant data.

Cookies and authentication

Our embedded Shopify apps use Shopify session tokens (App Bridge). We do not rely on third-party cookies for authentication. A browser may store simple local preferences needed for the app experience.

Merchant responsibilities

Merchants remain the controllers of their store’s customer data in Shopify. Merchants are responsible for ensuring they have the rights to any content they upload into an app.

Changes to this policy

We may update this policy from time to time. The “Last updated” date will change when we do. Material changes will be posted on this page.

Contact

If you have questions about how we use merchants’ data:

Privacy: support@ilmosys.com
Support: support@ilmosys.com