Privacy Policy

ShipWize for Shopify · Last updated 2026-08-15

ShipWize ("the App") is a free-shipping progress bar for Shopify stores, developed and operated by Secretix ("we", "us"). This policy explains what information the App receives when a merchant installs it, how that information is used, and the choices merchants and their customers have. By installing the App you agree to this policy.

1. Information we collect from merchants

When you install the App we receive, through Shopify's APIs and with your authorisation, the information needed to run the service:

• Store information — your myshopify.com domain, store name, store owner email, country, currency, timezone and Shopify plan.
• API access token — the credential Shopify issues so the App can read the theme and product data your bars target. It is stored encrypted at rest and is deleted when you uninstall.
• Configuration you create — your shipping bars: goals, messages, styles, schedules and targeting rules (countries, pages, products, collections).
• Theme access — the App reads your published theme's settings only to check whether the ShipWize app embed is enabled. It does not modify theme files.
• Product and collection data — read only when you pick products or collections as targeting rules; the App stores the identifiers you selected, not your catalogue.

2. Information collected on your storefront

The bar renders in your customers' browsers as a Shopify theme app extension. To work, it:

• reads the current cart total from your storefront (locally, via Shopify's cart API) to compute progress toward the goal;
• may look up the visitor's approximate country and currency from their IP address using a third-party geolocation service (freeipapi.com), solely to apply your geo-targeting rules and currency conversion — the IP address is sent to that provider directly from the visitor's browser and is not stored by us;
• sends anonymous, aggregate usage events to us — bar views, progress started, goal reached — with no personal identifiers, cookies or cross-site tracking.

The App does not collect customer names, email addresses, order contents, payment details or browsing history, and does not set tracking cookies.

3. How we use information

• to display and configure your shipping bars;
• to show you performance analytics for your bars;
• to provide support, respond to your requests and notify you of important service changes;
• to operate, secure and improve the App (error monitoring, abuse prevention).

We do not sell, rent or share your data with advertisers, and we do not use it for purposes unrelated to the App.

4. Sharing and sub-processors

We share data only with service providers that host or support the App, under contractual confidentiality: cloud hosting and database providers, error monitoring, transactional email, and — from the visitor's browser only — the IP geolocation provider named above (freeipapi.com). Shopify itself processes data under its own Privacy Policy. We may disclose information if required by law.

5. Data retention and deletion

Store data and configuration are kept while the App is installed. When you uninstall, Shopify notifies us and your access token is invalidated immediately; store records, bars and analytics are deleted within 30 days unless a longer period is required by law. You may request earlier deletion at any time via the contact below.

6. Your rights and Shopify's privacy webhooks

The App implements Shopify's mandatory privacy webhooks. Merchants and their customers may request access to, correction of, or deletion of personal data at any time; requests received via Shopify (customers/data_request, customers/redact, shop/redact) are honoured automatically. Because the App stores no customer personal data, customer requests typically return an empty result. If you are in the EEA, UK or another jurisdiction with data-protection rights, you may also lodge a complaint with your local supervisory authority.

7. Security

Data is transmitted over TLS and stored in access-controlled infrastructure. Shopify access tokens are encrypted at rest. Access is limited to personnel who need it to operate the App.

8. International transfers

Secretix is based in Ho Chi Minh City, Vietnam; hosting providers may process data in other regions. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

9. Children

The App is a business tool for merchants and is not directed at children under 16. We do not knowingly collect their data.

10. Changes to this policy

We may update this policy as the App evolves. Material changes are announced in the App or by email to the store owner. The "last updated" date above always reflects the current version.

11. Contact

Secretix · Ho Chi Minh City, Vietnam
Email: [email protected]