Privacy Policy

01

Who This Policy Applies To

This Privacy Policy applies to Shopify merchants who install the POSGivr app from the Shopify App Store and to anyone who visits posgivr.com (our website).

POSGivr is a point-of-sale tool — it runs on your Shopify POS device and is operated by your staff. POSGivr does not collect personal information about your customers (shoppers). We never see, store, or process the names, email addresses, payment details, or any other personal data belonging to the individuals who shop at your store.

02

Information We Collect

When you install POSGivr, we collect and store the following merchant-level data:

• Shopify shop domain — your myshopify.com store URL, used to identify your account in our system.
• OAuth access token — a Shopify-issued token that allows our app to read your store configuration and write donation line items to the cart. We never store your Shopify admin password.
• App configuration settings — your chosen round-up increments, flat donation amounts, and denomination-to-SKU mappings, stored as Shopify app metafields and in our database.
• Donation transaction records — for each donation added via POSGivr, we record: the Shopify order name, cart total at the time of donation, donation amount, and the store location (POS source). No customer names, emails, or payment details are included.
• Website usage data — standard server logs and anonymized analytics when you visit posgivr.com (IP address, browser type, pages visited, referral source). We do not use cross-site tracking.

We do not collect: customer names, customer email addresses, payment card information, customer physical addresses, or any biometric or sensitive personal data.

03

How We Use Your Information

We use the information we collect solely to provide and improve the POSGivr service:

• App functionality — to authenticate your store, load your configuration onto POS devices, and record donation transactions as they occur.
• Merchant dashboard — to display your donation totals, transaction history, and configuration settings in the POSGivr admin dashboard.
• Billing — Shopify manages all subscription billing on our behalf via the Shopify Billing API. We do not store your payment method.
• Customer support — to respond to support requests you send us and diagnose technical issues with your installation.
• App improvement — to understand aggregate usage patterns and improve the app's features. We never sell or share your data for marketing purposes.

We will never sell your data, rent it to third parties, or use it to serve you advertisements.

04

Data Storage & Security

Your merchant data is stored in Upstash Redis, a managed serverless database with encryption at rest and in transit. Our application backend is hosted on Vercel, which provides infrastructure-level security, DDoS protection, and automatic SSL.

Each Shopify store's data is stored in isolation — your transaction records and configuration are never commingled with data from other merchants.

We implement the following practices to protect your data:

• All data is transmitted over HTTPS/TLS.
• OAuth tokens are stored encrypted and scoped to only the Shopify API permissions required by the app.
• Access to production systems is restricted to authorized POSGivr LLC personnel only.
• We do not log or store full cart contents — only the cart total and the donation amount at the moment of transaction.

No system is 100% secure. If we become aware of a breach affecting your data, we will notify you promptly in accordance with applicable law.

05

Third-Party Services

POSGivr uses the following third-party services to operate. Each has its own privacy policy governing how they handle data:

We do not integrate with advertising networks, social media platforms, or data brokers. We do not use third-party analytics that track individuals across websites.

06

Data Retention

We retain your merchant data for as long as your POSGivr subscription is active. If you uninstall POSGivr from your Shopify store:

• Your OAuth access token is immediately invalidated via Shopify's uninstall webhook.
• Your configuration settings and transaction history are retained for 30 days following uninstall, in case you reinstall and wish to retain your donation history.
• After 30 days, all data associated with your store is permanently deleted from our systems.

You may request immediate deletion of your data before the 30-day period by contacting us at privacy@posgivr.com.

07

Your Rights

As a merchant using POSGivr, you have the following rights regarding your data:

• Access — You may request a copy of the data we hold about your store at any time.
• Correction — If any stored information is inaccurate, you may ask us to correct it.
• Deletion — You may request that we delete your data at any time. We will fulfill deletion requests within 10 business days.
• Portability — You may request your transaction history in a standard format (CSV) for export.
• Objection — If you believe we are processing your data in a manner inconsistent with this policy, you may object and we will investigate promptly.

To exercise any of these rights, contact us at privacy@posgivr.com. We will respond within 10 business days. We do not require you to create an account or pay a fee to make a data rights request.

If you are located in California, you may also have rights under the California Consumer Privacy Act (CCPA), including the right to know, the right to delete, and the right to opt out of sale of personal information. We do not sell personal information.

08

Children's Privacy

POSGivr is a business-to-business software product intended for use by Shopify merchants and their staff. It is not directed at individuals under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@posgivr.com and we will delete it promptly.

09

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page.

If we make material changes that affect how we handle your data, we will notify you via the email address associated with your Shopify account or via an in-app notice, with at least 14 days' notice before the changes take effect.

Your continued use of POSGivr after changes take effect constitutes acceptance of the updated policy. If you do not agree with the updated policy, you may uninstall POSGivr at any time.

10

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your data, please reach out to us: