1. Introduction
BadgeLab (“we,” “our,” or “us”) operates as a Shopify application that enables merchants to create and manage product badges on their online stores. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application. Please read this policy carefully.

2. Information We Collect

2.1 Information from Shopify

When you install and authorize BadgeLab, we access the following data from your Shopify store through Shopify’s APIs:
  • Store Information: Your store domain, timezone settings, and OAuth tokens required for app functionality
  • Product Data: Product titles, handles (URL slugs), SKUs, prices, compare-at prices, inventory levels, status, and product images
  • Collection Data: Collection names and Shopify IDs to enable bulk badge assignments
  • Theme Access: Read and write access to your theme files for the app embed block that displays badges on your storefront

2.2 Information We Generate

  • Badge Configurations: Your badge designs, settings, and assignments to products
  • App Settings: Your preferences including display locations, scheduling, and positioning
  • Subscription Data: Your subscription status managed through Shopify’s Billing API

2.3 What We Do NOT Collect

BadgeLab does not collect, store, or process:
  • Customer or buyer personal information (names, emails, addresses, phone numbers)
  • Order or transaction data
  • Payment or financial information
  • Customer browsing behavior or analytics

3. How We Use Your Information

We use the information we collect solely to provide and improve our service:
  • Display Badges: To render product badges on your storefront based on your configurations
  • Product Sync: To keep your product catalog synchronized for badge assignment
  • Auto-Badge Features: To automatically apply “Sold Out” or “Sale” badges based on inventory and pricing data
  • Scheduling: To show and hide badges according to your scheduled times using your store’s timezone
  • Subscription Management: To manage your app subscription through Shopify’s Billing API

4. Data Sharing and Disclosure

We do not sell, trade, or rent your information to third parties. We may share information only in the following circumstances:
  • Service Providers: We use cloud infrastructure providers (e.g., database hosting) to operate our service. These providers are contractually obligated to protect your data.
  • Legal Requirements: We may disclose information if required by law, court order, or governmental request.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your data for as long as your app remains installed on your Shopify store. When you uninstall BadgeLab, we will delete your store data within 30 days, except where we are required to retain it for legal or regulatory purposes. Badge configurations and product assignments are permanently deleted upon uninstallation.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:
  • All data is encrypted in transit using TLS/SSL
  • OAuth tokens are securely stored and never exposed to frontend applications
  • Access to production systems is restricted and logged
  • Regular security reviews and updates

7. Your Rights

Depending on your location, you may have the following rights regarding your data:
  • Access: Request a copy of the data we hold about your store
  • Rectification: Request correction of inaccurate data
  • Deletion: Request deletion of your data (also achieved by uninstalling the app)
  • Portability: Request your data in a machine-readable format
  • Objection: Object to certain processing of your data
To exercise these rights, please contact us at the email address below.

8. GDPR Compliance (European Users)

For users in the European Economic Area (EEA) and United Kingdom, we process your data based on the following legal bases:
  • Contractual Necessity: Processing required to provide the services you requested when installing the app
  • Legitimate Interests: Processing necessary for our legitimate interests in operating and improving our service
We respond to data subject requests within 30 days as required by GDPR.

9. CCPA Compliance (California Users)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
  • Right to know what personal information is collected and how it’s used
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your privacy rights

10. Shopify’s Data Processing

BadgeLab operates within Shopify’s ecosystem. Shopify has its own privacy practices that govern how they handle your store data. We encourage you to review Shopify’s Privacy Policy for information about their data practices.

11. Children’s Privacy

BadgeLab is designed for use by Shopify merchants (business owners). We do not knowingly collect information from children under 16 years of age.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the “Last updated” date at the top of this policy. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

BadgeLab Support

Email: thebadgelabapp@gmail.com