CoShop

Privacy Policy

Last updated: 30 June 2026

This Privacy Policy explains how the CoShop application  collects, uses, stores, and protects information when a Shopify merchant installs and uses the app, and when shoppers interact with CoShop on a merchant's storefront. By installing or using CoShop, you agree to this policy.

1. Information We Collect

CoShop collects only the data needed to provide its group-shopping and group-discount features:

• Store information — your Shopify store domain, basic store details, and access tokens granted during installation, used to connect CoShop to your store.
• Product, order, and discount data — product and variant details, order attributes, and discount information needed to power group rooms, shared carts, and automatic discounts.
• Shopping room activity — room participation, chat messages, votes, shared-cart items, and related activity created by shoppers inside a CoShop room.
• Optional shopper identifiers — a display name, and an email address only if a shopper chooses to provide one when joining a room. Shopper emails are never broadcast to other participants.

2. How We Use Information

• To create and run live shopping rooms, chat, voting, and shared carts.
• To calculate and apply group discounts at checkout based on the rules a merchant sets.
• To show merchants their rooms, group orders, and customer activity in the app's admin.
• To operate, maintain, secure, and improve the app.

We do not sell personal information, and we do not use it for advertising.

3. Data Sharing

We share data only as needed to operate the service:

• Shopify — to read and write the store data required for the app's features through Shopify's APIs.
• Infrastructure providers — our hosting and real-time messaging infrastructure, used solely to run the app.
• Legal requirements — where required by law or to protect rights, safety, and security.

We do not share personal data with third parties for their own marketing.

4. Data Retention & Deletion

We retain data only as long as needed to provide the service. When a merchant uninstalls CoShop, related store data is deleted or anonymized. We also honor Shopify's mandatory data-protection webhooks:

• customers/redact — deletes a specific customer's data on request.
• shop/redact — deletes a store's data after the app is uninstalled.
• customers/data_request — provides a customer's stored data on request.

5. Data Security

We use reasonable technical and organizational measures to protect data, including encrypted connections (HTTPS) and signed, authenticated requests for room actions. No method of transmission or storage is completely secure, but we work to safeguard your information.

6. Shoppers' Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. Shoppers can request this through the merchant whose store they used, or by contacting us directly. Merchants and shoppers in the EU/UK are covered by GDPR; California residents by the CCPA.

7. Children

CoShop is not directed to children under 16 and does not knowingly collect their data.

8. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above reflects the latest version.

9. Contact