Store momentum without collecting more than we need.

Information we collect

We collect the Shopify store domain, authenticated app sessions, campaign settings, subscription status, and support messages needed to provide and administer EncorePop.

For purchase notifications, we keep only the eligible paid-order details needed to produce the selected message: a non-public order reference, product reference, event time, and—only when the merchant separately enables them—customer first name or generalized city. EncorePop does not retain customer email, phone number, surname, street address, or a copy of the full order.

When storefront analytics consent permits it, EncorePop can process a random first-party visitor identifier, short-lived presence heartbeats, notification impressions, clicks, campaign identifiers, and the relevant storefront URL. Without analytics consent, EncorePop does not persist a visitor identifier or send presence or analytics events.

How we use information

• Provide, secure, troubleshoot, and improve the EncorePop service.
• Render eligible storefront notifications and enforce merchant settings.
• Measure notification impressions, clicks, plan usage, and consent-aware live presence.
• Manage Shopify installation, subscriptions, support, and required privacy requests.

How information is shared

We share information only with Shopify, infrastructure and service providers acting on our behalf, or authorities when disclosure is legally required. We do not sell merchant or shopper personal information. Shopify handles its own services under Shopify’s privacy terms.

Retention and deletion

Individual purchase events are retained for up to 30 days and are eligible for storefront display for no more than seven days. Short-lived presence data expires when it is no longer active. Other operational records are kept only as long as needed for the service, security, accounting, dispute resolution, or legal obligations.

EncorePop responds to Shopify’s mandatory customer-data, customer-redaction, shop-redaction, and uninstall workflows. Merchants can also contact us to request access, correction, or deletion where applicable.

Security and international processing

We use access controls, encrypted Shopify session storage, signed request verification, and data minimization to protect information. No internet service can promise absolute security. Information may be processed where EncorePop and its service providers operate, subject to applicable safeguards.

Your choices and rights

Merchants control whether optional first name and city fields are used for future orders, can unpublish campaigns, and can uninstall EncorePop. Shoppers can use their storefront privacy controls. Depending on location, individuals may have rights to access, correct, delete, restrict, or object to processing of their personal information.

Changes and contact

We may update this notice as EncorePop changes. Material updates will be posted here with a revised date. For privacy questions or requests, email [email protected] and include the relevant Shopify store domain so we can route the request safely.

AuditPatterns, LLC, 6492 Rand St., Moorpark, CA 93021, USA.