Privacy Policy

Last updated: October 14, 2026

This Privacy Policy explains how [BUSINESS NAME] (“Teroyn”, “we”, “us”) collects, uses and discloses information when you visit teroyn.com (the “Site”) or when a merchant installs one of our Shopify apps (the “Apps”).

1. Who we are

[BUSINESS NAME], [BUSINESS ADDRESS], United States. Full contact details are on our Contact & Legal page. For EU/UK visitors, we are the “controller” of Site data. Privacy contact: [email protected].

2. This website

Hosting and server logs

The Site is hosted and delivered by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which acts as our service provider/processor. When you load a page, Cloudflare automatically processes technical data such as your IP address, date and time, requested URL, referrer, browser and device type, to deliver the page and protect it against abuse. We do not combine this data with other data. Cloudflare keeps these logs only for a short period under its own retention practices. For EU/UK visitors the legal basis is our legitimate interest in a secure, working website (GDPR Art. 6(1)(f)); transfers to the US rely on Cloudflare’s certification under the EU-U.S. Data Privacy Framework and, where applicable, Standard Contractual Clauses.

No cookies, tracking or analytics

The Site sets no cookies and uses no analytics, advertising, tracking pixels, social media plugins or third-party embeds. Fonts are self-hosted, so your browser does not contact Google or other font services.

Do Not Track

Because we do not track visitors across sites or over time, the Site does not change behavior in response to “Do Not Track” browser signals or Global Privacy Control; there is no tracking to switch off.

Email

If you email us, we use your email address and message to reply and keep the correspondence as long as needed to handle your request and for our records (EU basis: Art. 6(1)(b) or (f) GDPR).

3. Our Shopify Apps

When a merchant installs an App, we access shop data through the Shopify API only as needed for the App’s features, with the permissions the merchant approves. Depending on the App this may include the shop domain and settings, the merchant’s contact email, App configuration, product and inventory data, and — only where a feature needs it — limited order or customer data (for example, an email address a shopper enters to request a notification). Shopify Inc. operates the platform and processes billing; its own privacy policy applies to that processing.

For merchants’ customers’ data, the merchant is the business/controller and we act as its service provider/processor, processing data only to provide the App.

We support Shopify’s mandatory privacy webhooks: customers/data_request (we provide stored data about a customer to the merchant), customers/redact (we delete that customer’s data) and shop/redact (we delete the shop’s data after it uninstalls). When a merchant uninstalls an App, we delete its shop data within 48 hours after Shopify sends the shop/redact request, except where we must keep records by law.

Apps are hosted with infrastructure providers [APP HOSTING PROVIDERS, e.g. Railway Corp. (USA)], acting as our service providers.

4. How we share information

We share information only with service providers that help us run the Site and Apps (such as Cloudflare, our app hosting provider and Shopify), when required by law, or as part of a merger or sale of our business. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act as amended by the CPRA (CCPA), and we do not use it for targeted advertising or profiling.

5. Retention

Server logs: per Cloudflare’s short-term retention. Emails: as long as needed for the request and our records, typically up to 3 years. App data: while the App is installed, then deleted as described above. Billing records are kept by Shopify.

6. Your US state privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Utah, Texas and other states with consumer privacy laws), you may have the right to know/access the personal information we hold about you, to correct it, to delete it, to obtain a portable copy, and to opt out of sale, sharing, targeted advertising or profiling (we do none of these). We will not discriminate against you for exercising your rights. You or an authorized agent can make a request by emailing [email protected]; we will verify your request and respond within the time required by law. If we deny a request, you may appeal by replying to our decision. If you are a shopper of a store using our Apps, please contact that store first; we will assist the merchant.

California categories (last 12 months): identifiers (IP address, email address) and internet activity (server logs), collected from you or from Shopify merchants, for the purposes described above, disclosed only to service providers. We do not collect sensitive personal information for inferring characteristics.

7. Rights for EU, EEA and UK residents

Under the GDPR/UK GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Email us to exercise them. You may also lodge a complaint with a data protection supervisory authority, in particular in your country of residence.

8. Children

The Site and Apps are intended for businesses and are not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children, consistent with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has provided us data, contact us and we will delete it.

9. Security

We use HTTPS everywhere, access controls and least-privilege API scopes. No method of transmission or storage is 100% secure.

10. Changes

We may update this policy. We will post the new version here with a new “Last updated” date and, for material changes affecting merchants, notify them through the App or by email.

11. Contact

[email protected] · [BUSINESS NAME], [BUSINESS ADDRESS]