PayLogic

Privacy Policy

Last updated: 2026-04-21

PayLogic ("we", "us", or "the App") is a payment customization app that runs inside the Shopify Admin for merchants who install it. This Privacy Policy describes what information we collect, how we use it, and what rights you have as a merchant or as a merchant's customer.

1. Information we collect

From merchants who install the App:

• Shop identifier (.myshopify.com domain), shop timezone, and currency — used to scope the app to your store.
• Rule configurations you author in the PayLogic dashboard — stored as a JSON metafield on a Payment Customization resource within your Shopify store.
• OAuth session data (access token, scopes) — stored encrypted at rest.

From customers at checkout:

PayLogic does not collect or store data about individual shoppers. It reads cart metadata (total, line items, shipping country, tags on the product and buyer) at the moment of checkout, evaluates your rules against that input, and returns hide / reorder / rename operations to Shopify. No personally identifying information about shoppers is logged, persisted, or transmitted to us.

2. How we use the information

• We use merchant shop data only to authenticate API calls and apply your rules at checkout.
• We do not sell, rent, or share merchant or shopper data with third parties.
• We do not use shopper data for advertising, profiling, or analytics.

3. Where the data lives

Rule configurations live inside your Shopify store as Payment Customization metafields. PayLogic does not operate its own customer database. OAuth session tokens are stored encrypted in a database hosted by our infrastructure provider, used solely to make API calls on your behalf.

4. Data retention and deletion

When you uninstall PayLogic, Shopify sends us an app/uninstalled webhook. We respond by deleting all session and configuration records we hold for your shop. Rule metafields on your Payment Customization objects are also removed.

We respect all required Shopify mandatory webhooks:

• customers/data_request — we hold no customer-scoped data, so we respond confirming no records are kept.
• customers/redact — same; no action required on our side.
• shop/redact — triggers deletion of any residual shop-level data.

5. Your rights

If you are a merchant:

• You can uninstall PayLogic at any time from your Shopify admin. On uninstall, we delete your session and configuration records.
• You can request a full data export or confirmation of deletion by emailing support@paylogic.dev.

If you are a shopper: PayLogic does not collect data about you directly. Your rights regarding any data collected by the merchant's Shopify store itself are governed by that merchant's privacy policy, not ours.

6. Security

• All traffic between your Shopify admin and PayLogic is encrypted in transit via HTTPS.
• OAuth tokens are stored encrypted at rest.
• We do not log or transmit shopper PII under any circumstances.

7. Third-party services

PayLogic is built on the Shopify Functions platform and runs within Shopify's infrastructure. We do not use any third-party analytics, advertising, or tracking services.

8. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be reflected here along with a new "Last updated" date. For material changes, we will notify merchants via in-app notification or email.

9. Contact

Questions or data requests: support@paylogic.dev