What ShopLore Does
ShopLore is an embedded Shopify application that provides store owners with an achievement system, journal, and goal tracker based on their store activity. It also tracks login streaks and provides activity summaries when you return after time away. It is designed for merchants only and does not interact with or collect data from your store’s customers.
Data We Collect From Your Store
When you install ShopLore, we request the following Shopify access scopes: read_orders, read_customers, read_products, read_fulfillments, read_inventory, read_discounts, read_gift_cards, and read_locations. We use these scopes to calculate aggregate statistics about your store such as total order count, total revenue, total customer count, total product count, and total fulfillment count. These aggregate numbers are stored in our database and used to evaluate achievement progress.
We also store country codes derived from customer billing addresses to track how many countries your store has sold to. This is used solely for geographic milestone achievements.
We track your login activity within ShopLore, including consecutive login streaks and your last visit date. This data is used to display your login streak achievements and to generate a welcome-back activity summary when you return to the app after time away.
Data We Do Not Collect
We do not store any customer personally identifiable information. This includes customer names, email addresses, phone numbers, physical addresses, payment details, or any other information that could identify an individual customer. We only store aggregate counts and country codes.
Journal and User-Generated Content
ShopLore includes a journal feature where you can write notes about your store milestones. Journal entries are stored in our database and are associated with your store. You control what you write and can delete entries at any time.
You may also create custom achievements, memory achievements pinned to specific dates, and personal goals. All of this content is stored in our database and associated with your store. You can edit or delete any of it at any time.
How We Receive Data
ShopLore receives store data through Shopify webhooks. When an order is created, a customer is added, a product is created, or a fulfillment is created, Shopify sends a notification to our application. We verify the authenticity of every webhook using HMAC signature verification before processing any data. We extract only the aggregate values we need and discard the rest.
On initial installation, we perform a one-time sync to fetch your current store statistics from the Shopify API so that achievements can be awarded retroactively based on your existing store history.
Data Storage and Security
Your data is stored in a PostgreSQL database hosted on secure infrastructure. All communication between your Shopify store and ShopLore occurs over HTTPS. We do not sell, rent, or share your store data with any third parties.
Third-Party Services
ShopLore uses the following third-party services to operate:
- Shopify API — for reading store data and managing app subscriptions.
- Resend — for sending optional digest emails if you opt in.
- Redis — for background job processing.
These services only receive the minimum data necessary to perform their function.
Data Retention
Your store data, achievements, journal entries, and goals are retained for as long as ShopLore is installed on your store. If you uninstall ShopLore, your session data is removed. Achievement and journal data is retained for a limited period in case you reinstall the app, after which it is permanently deleted.
Your Rights
You can request a copy of the data we store about your store at any time by contacting us. You can request deletion of all your data by contacting us or by uninstalling the application. If you are located in a jurisdiction with specific data protection rights such as the GDPR or CCPA, we will honor applicable requests.
Changes to This Policy
We may update this privacy policy from time to time. If we make significant changes, we will notify you through the application. The date at the top of this policy reflects the most recent update.
Contact
If you have questions about this privacy policy or your data, contact us at:
WebZGarden
support@webzgarden.com