Personal Information the App Collects When you install the App, it accesses your Shopify store with the permissions you approve on Shopify’s install screen, to build and show your LinkShop pages and to report on them. From your store we keep your store’s name, URL, plan and owner email, the email address of staff members who use the App, and the pages, blocks and settings you create in LinkShop. Products, collections, discounts and orders are read from Shopify when they are needed and are not copied. When a shopper signs up through a LinkShop email form, their email address is passed straight to your Shopify store as a customer subscribed to your marketing; LinkShop does not keep a copy. We do not process or store payment card information.
Instagram If you connect an Instagram professional account to LinkShop (the Instagram DMs feature), we use Instagram’s API, with the permissions you approve on Instagram’s consent screen, to reply to comments on your posts with a direct message that links to your LinkShop page. When you connect, we store your Instagram account’s ID, username and profile picture, and an access token that lets LinkShop act for that account. We read your recent posts so you can choose which one an automation applies to, and receive notifications from Instagram about comments on your posts and messages sent to your account.
When someone comments on your post with a keyword you chose, we send them one private reply with a link, and a public reply under their comment if you turned that on. If you ask people to reply first, we read their reply, then send the link and, if you turned them on, up to two follow-up messages, all within 24 hours of their reply, as Instagram allows. To do this we store, per comment we answer: the commenter’s Instagram-scoped ID and username, their name once they have messaged you, the comment ID, and which automation answered. These records are deleted automatically after 30 days. We also keep counts of messages sent, links opened and orders placed, which contain no Instagram usernames or IDs.
We use Instagram data only to run the automations you set up and to show you how they perform. We do not sell it, use it for advertising, or share it with anyone other than the service providers that host LinkShop (Cloudflare and Shopify).
Deleting Instagram data You can disconnect Instagram from LinkShop at any time (Instagram DMs → Disconnect), and you can remove LinkShop’s access in Instagram (Settings → Website permissions → Apps and websites). Either way we delete the access token at once and your automations stop. When you uninstall LinkShop we disconnect Instagram immediately, and delete your automations, comment records and message statistics when Shopify asks us to erase your store’s data (48 hours after uninstalling). When you ask Instagram to delete the data LinkShop holds about you, Instagram tells us and we delete all of it, and you can check the status of that request at the link Instagram gives you. You can also ask us to delete this data by e-mail at hello@checkoutlinks.com; we do so within 30 days.
How Do We Use Your Personal Information? We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. Additionally, we use this personal information to: Communicate with you; Optimize or improve the App; and Provide you with information or advertising relating to our products or services.
Sharing Your Personal Information We use these service providers to run the App: Cloudflare (hosting and data storage), Shopify (the platform the App runs on, and billing), Meta (only if you connect Instagram, as described above), and Slack (internal notifications to our team when a store installs the App or changes plan). We do not sell your personal information. We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Your Rights If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below. We process your information to provide the App under our agreement with you, or otherwise to pursue our legitimate business interests listed above. For your customers’ data, we act as a processor on your behalf. Please note that your information may be transferred outside of Europe, including to the United States.
Data Retention LinkShop does not keep copies of your store’s orders: order details stay in Shopify, and LinkShop’s dashboard reads its own orders from Shopify when you open it. For orders placed through LinkShop we record the order number, date and amounts, with no customer details, to count usage. We keep your LinkShop pages and settings while the app is installed. Page statistics (views, clicks and add-to-carts, with no customer details) are kept as individual events for 90 days and as daily totals after that. Instagram data is kept as described above. When you uninstall LinkShop, we delete your pages, settings and Instagram data when Shopify asks us to erase your store’s data, 48 hours after uninstalling.
Changes We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
Contact Us For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at hello@checkoutlinks.com. LinkShop is operated by Edinson & P AB, Sweden.