BasketPeak Privacy Policy
This policy explains how Jaat Company collects, uses, and protects information when a Shopify merchant installs or uses BasketPeak.
Information we process
- Shopify installation data needed to authenticate the merchant, including shop domain, authorized user details, access scopes, and protected access credentials.
- Basic store information such as store name, business email, currency, and timezone.
- App configuration such as bundle text, tier discounts, colors, product selections and visibility settings.
- If analytics features are enabled, limited app interaction events such as offer clicks or additions and non-customer-attributed order values. The production MVP does not require customer names, addresses, or payment information.
Dashboard product analytics
We use PostHog to measure store-level dashboard visits and actions such as creating or publishing bundles, using a hashed store identifier. We do not intentionally send Shopify tokens, form values, customer details or chat content. Session recording and automatic interaction capture are disabled.
Storefront storage
The optional countdown module uses browser session storage to keep the timer consistent during the shopper's current browsing session. It is not used for cross-store advertising or customer profiling.
How information is used
We use the information only to provide, secure, troubleshoot, and improve the app; synchronize merchant-selected settings with the storefront; respond to support requests; and meet legal obligations.
Sharing and service providers
Information is processed through Shopify and the infrastructure providers used to host the app and its database. We do not sell merchant or shopper personal information. Providers receive only the access needed to operate the service and are expected to protect it.
When a merchant chooses automatic translation, the selected bundle text is sent to Google Gemini or Google Cloud Translation, depending on the app configuration, to generate suggested translations. Merchants can review and edit these suggestions before publishing them. Automatic translation does not send shopper records or Shopify access credentials to Google. When Gemini's free tier is used, Google may use submitted text and generated translations to improve its products under its applicable terms. App dashboard language preparation sends only the app's standard interface text.
Retention and deletion
App sessions are removed when the app is uninstalled. Remaining shop configuration is retained only as needed for service continuity, security, legal obligations, and Shopify's required deletion workflow. The app responds to Shopify's customer data request, customer redaction, and shop redaction webhooks. Shop redaction permanently deletes stored shop, offer, event, and session records.
Security
We use Shopify authentication, signed webhook verification, restricted access scopes, HTTPS in production, and access-controlled application infrastructure. No online system can guarantee absolute security.
Your choices and rights
Merchants can change app configuration at any time and can uninstall the app to revoke its access. Privacy requests can be submitted through Shopify or by contacting us.
Contact
Privacy questions: pjat95105@gmail.com