Privacy Policy

Last updated: August 4, 2026

Offrz (“we”, “us”) is a Shopify app that lets shoppers make an offer on a merchant’s products and lets the merchant accept, counter, or decline it. This policy explains what data the app collects when a merchant installs it on their Shopify store, how we use that data, and how long we keep it.

The merchant who installs Offrz is the controller of their store’s and their shoppers’ personal data. We process that data as their processor, solely to provide the app.

Data we collect from merchants

• Store and account details. Your myshopify.com domain, the Shopify access token issued at install, and the name and email of the staff user who authenticates with the app.
• App settings. Your offer rules (which products or collections accept offers, and your accept, counter, and decline thresholds), your notification preferences, the email address and, if you opt into text alerts, the mobile number you choose for offer alerts, and your onboarding progress.
• Billing records. Your subscription plan and the commission we meter to Shopify when an offer converts. Shopify handles payment; we never see your card details.

Data we collect about shoppers

When a shopper submits an offer, we store the offer itself: the product and variant, the original and offered price, the currency and quantity, the discount code and checkout we create for it, and the resulting order once it exists. Alongside it we store the shopper’s Shopify customer ID, name, email address, and phone number, so the merchant can identify and act on the offer and so we can email the shopper when an offer is declined.

We also keep a status history for each offer — what changed, when, and the underlying event data — which we use to reconcile offers and debug failed payments.

Shopify data we access

With the merchant’s permission at install, the app reads and writes products, inventory, orders, purchase options, discounts, payment mandates, and the theme’s app-embed status through Shopify’s APIs. We also receive webhooks for orders, app scope changes, and app uninstalls. We request only the scopes the offer flow needs and we do not copy your catalog or order history into our systems beyond the offer records described above.

How we use data

• To create, price, and settle offers on your store.
• To email you — and, if you opt in, to text you — when an offer needs a decision, and to email a shopper when their offer is declined, if you enable those notifications.
• To meter and bill commission through Shopify.
• To operate, monitor, and troubleshoot the app, including internal alerts to our own team on installs, offers, billing, and failures. Those alerts carry your store domain and offer details only — never shopper contact details.

We do not sell personal data, and we do not use it to advertise or to train machine-learning models.

SMS text alerts (opt-in)

The app can text the merchant when an offer needs their review. These are transactional messages sent only to the merchant, at their own US mobile number — shoppers never receive texts, and there is no marketing content. Message frequency varies with your offer volume, and message and data rates may apply.

SMS is optional and off by default. A merchant turns it on themselves, in the app:

1. In the Offrz app (Shopify admin), open Settings → Merchant alerts.
2. Check “Yes, text me about new offers” — unchecked by default, never pre-selected.
3. Enter your own US mobile number in the field that appears.
4. Save. Consent to texts is not required to use the app.

Reply STOP to any text to unsubscribe, or HELP for help; you can also turn texts off anytime by unchecking the box in Settings. We never share mobile numbers or SMS opt-in consent with third parties, and no mobile information is shared for marketing or promotional purposes.

Service providers

• Shopify — the platform the app runs on and the source of store, order, and customer data.
• Heroku (Salesforce) — application hosting and the database where the records above are stored.
• Resend — delivery of the notification emails described above.
• Twilio — delivery of the optional SMS offer alerts, when a merchant opts in. Twilio receives the merchant’s mobile number and the message text; shopper contact details are never sent.
• Slack — internal operational alerts to our team.

Retention and deletion

• When a shopper is redacted. On Shopify’s customer redaction request we clear that shopper’s ID, name, email, and phone from their offers and delete the raw event data attached to them. The offer record itself remains as the financial record behind an order the merchant still has to reconcile.
• When you uninstall. Shopify sends a shop redaction request 48 hours after uninstall, and we then delete everything we hold for your store: offers and their history, offer rules, setup, notification settings, onboarding state, and your session and access token.
• Access requests. If a shopper asks a merchant what we hold about them, Shopify forwards the request to us and we respond to the merchant within 30 days.

Security

Data is transmitted over TLS and stored on managed infrastructure with access limited to the people who operate the app. Offer links are identified by a hashed token rather than a guessable ID. No system is perfectly secure, but we work to protect data against unauthorized access, loss, and misuse.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to its processing. Shoppers should contact the merchant they made an offer with; merchants, and anyone we can’t route through a merchant, can contact us directly and we will help.

Changes

We may update this policy as the app changes. Material changes will be reflected in the “last updated” date above and, where required, notified to merchants in the app.

Contact

Questions or requests: support@getoffrz.com.