Tab Promo App Privacy Policy

1. Scope

This Policy applies to information processed through the Tab Promo Shopify app, including the embedded merchant admin app, Shopify Discount Function runtimes deployed by the app, Theme App Extension blocks, the storefront promotion App Proxy endpoint and browser SDK, and connected operational services used to provide the app. It does not replace the general website privacy policy for browsing tabcommerce.io.

2. Our Role

Tab Promo is used by Shopify merchants to build, simulate, publish, and roll back checkout promotion campaigns expressed as rules. In providing the app, we process information on behalf of merchants and for the limited purposes described in this Policy and in our agreements with merchants.

3. Information Processed Through the App

Depending on how a merchant uses Tab Promo, the app may process the following categories of information:

Merchant account and store information, such as shop domain, subscription status, plan tier entitlements, app configuration, and settings required to operate the app.
Promotion configuration created by merchant users, such as campaign definitions, rule predicates, action descriptors, runtime profile selection, schedule windows, combinability settings, and published version history.
Customer attributes accessed through Shopify APIs, such as customer tags, B2B or company-purchase status, prior order count, lifetime value, login state, and customer metafield values that a merchant has selected as discount conditions.
Product and variant attributes accessed through Shopify APIs, such as product and variant identifiers, collection membership, and product or variant metafield values that a merchant has selected as discount conditions.
Cart and checkout context evaluated at runtime, such as cart line items, subtotals, currencies, shipping country, and quantities provided by Shopify Functions or by the storefront promotion App Proxy.
Order and discount allocation records used for campaign-level attribution, such as discount application identifiers and line-item discount amounts associated with published Tab Promo campaigns.
Operational records, such as webhook deliveries (discount updates and deletions, subscription updates, app uninstall and compliance topics), publish job status, readiness check results, and configuration actions taken by merchant users inside the app.

4. Why We Process This Information

We process information through Tab Promo only as needed to provide the app's functionality to merchants. This includes:

Storing and editing merchant-defined campaigns, rules, and runtime profile selections
Compiling rules into Shopify Function configurations and publishing them as automatic or code discounts
Running readiness checks and previews against merchant-supplied sample carts and orders
Maintaining versioned publish history and supporting one-step rollback to a previous published state
Reading customer, product, and variant metafields selected by the merchant as discount conditions
Resolving storefront promotion display state and confirmed shopper-requested cart actions for merchant theme integrations through the App Proxy endpoint, Theme App Extension, or storefront SDK
Recording campaign-level attribution from order discount allocations
Supporting merchant setup, billing, troubleshooting, security, and operational support

5. Data Minimization and Use Limits

We aim to process only the information reasonably necessary to provide Tab Promo to merchants. We do not sell merchant or customer personal information processed through the app. We do not use merchant customer data for unrelated marketing, advertising, profiling, or data brokerage purposes. Customer and product metafield values are read only when a merchant has explicitly selected the corresponding metafield as a discount condition.

6. How Information May Be Shared

We may share information only where reasonably necessary to operate the app, support merchants, or comply with legal obligations. This can include sharing with:

Infrastructure, hosting, storage, monitoring, and communications providers that support operation of the app.
Shopify, as the platform on which the app runs and through which discount, customer, product, and order data is accessed and written.
Professional advisers, such as legal, accounting, compliance, or security providers.
Authorities or other parties when required by law, legal process, or to protect our rights, merchants, users, or systems.

7. Retention

We retain information for as long as reasonably necessary to provide the app, maintain operational integrity, meet contractual and legal obligations, resolve disputes, and enforce agreements. When a merchant uninstalls Tab Promo, app-managed automatic discounts and code discounts owned by the app are removed by Shopify as part of the platform's app uninstall cleanup. Merchant promotion configuration retained by Tab Promo may be deleted following the retention period required by applicable law and Shopify's app compliance requirements.

8. Shopify Compliance Webhooks

Tab Promo subscribes to Shopify's mandatory privacy webhooks and handles them as follows:

customers/data_request — when a merchant forwards a customer data request from Shopify, we coordinate with the merchant to identify any customer-linked data Tab Promo holds and respond within the time frame required by applicable law.
customers/redact — when Shopify notifies us that a customer has requested deletion, we delete or de-identify Tab Promo records that are linked to the affected customer identifier, subject to legal retention requirements.
shop/redact — when Shopify notifies us that a shop has requested deletion (typically 48 hours after app uninstall), we delete or de-identify Tab Promo records associated with that shop, subject to legal retention requirements.

9. Security

We use commercially reasonable administrative, technical, and organizational measures designed to protect information processed through Tab Promo, including encrypted transport for Shopify Admin API calls, App Proxy requests, and webhook deliveries. However, no system or transmission method is completely secure, and we cannot guarantee absolute security.

10. Merchant Requests and Data Rights

Merchants who use Tab Promo may contact us regarding privacy questions, support requests, or data-related concerns. Depending on applicable law and the merchant relationship, merchants or their customers may have rights relating to access, correction, deletion, restriction, objection, or portability of certain information.

If you are a merchant using Tab Promo and need help with a privacy or data-handling request, contact us using the details below.

11. International Processing

Information processed through Tab Promo may be stored or processed in jurisdictions other than the merchant's or customer's home jurisdiction, subject to applicable legal requirements and the infrastructure used to operate the app.

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will post the revised version on this page and update the effective date. Material changes may also be communicated through additional notice where appropriate.

13. Contact

If you have questions about this Policy or how Tab Promo processes information, please contact tab commerce technologies llc at business@tabcommerce.io.