Privacy Policy

This summary is not a substitute for the sections below, but nothing below contradicts it.

• PromoProof reads your Shopify discounts and products. It never edits either.
• It requests no customer access, no order access, and no write scopes of any kind.
• Test carts are built through Shopify’s Storefront Cart API. No order is created, no payment is taken, and no inventory is changed.
• What is stored is your shop’s domain, the session needed to keep the app installed, and the results of checks you have run.

PromoProof is built and run by an independent developer, not a registered company. There is no support desk behind it — messages reach the person who writes the code.

In this policy, “PromoProof”, “we” and “the app” refer to that developer and the software provided at promoproof.app. “You” means the merchant who installs the app on a Shopify store.

For anything in this policy, including a request about your data, write to info@promoproof.app. If that address ever fails to reach us, hohoegen@gmail.com works as a fallback.

When you install the app, Shopify asks you to approve a fixed set of permissions. PromoProof requests these and no others:

• read_discounts — to read the discounts you have already created, so they can be explained and tested. Discounts are never created, edited, or deleted.
• read_products — to find real products to build test carts from. A discount can only be tested against a cart that could actually exist in your store.
• unauthenticated_read_product_listings, unauthenticated_read_checkouts and unauthenticated_write_checkouts — the scopes required to mint a storefront access token and drive the Cart API. This is the mechanism that lets PromoProof observe your real discount engine.

The unauthenticated_write_checkouts scope permits creating and updating a cart. A cart is not an order. PromoProof stops before checkout: nothing is submitted, nothing is paid for, and nothing is reserved.

These permissions are deliberately not requested, so they cannot be used:

• No customer scopes. PromoProof does not request read_customers or any other customer permission.
• No order scopes. It does not read, create, or modify orders.
• No write scopes. It cannot change anything in your store — not discounts, not products, not inventory, not settings.

Because these permissions are never granted, the app has no technical route to this data even in the event of a bug.

PromoProof does not process your customers’ personal data. It does not read customer records, email addresses, names, addresses, or purchase histories.

Some discounts are restricted to particular customers or customer segments. To know whether such a discount can be tested, PromoProof needs to know only that a restriction of that kind exists — not who it applies to. It reads the shape of the restriction, which is enough to mark the discount as untestable by a signed-out cart, and requests no customer access at all.

Test carts are built without a customer identity. They are anonymous carts, which is also why customer-segment discounts cannot be verified and are reported as not tested rather than guessed at.

The app implements Shopify’s mandatory compliance webhooks (customers/data_request, customers/redact, and shop/redact). Since no customer data is collected, a customer data request or redaction request has no customer records to return or erase.

PromoProof stores the following:

• Your shop’s myshopify domain and the session record Shopify requires to keep an app installed and authenticated.
• The results of checks you run — which promotion was tested, the scenarios generated for it, the expected and observed amounts, the verdict, and when the run happened. This is what makes test history and the store health overview possible.
• Your current plan and the counters needed to enforce its limits.

Test results describe your promotions and the carts PromoProof constructed. They do not describe your customers, because no customer is involved in a test.

This website

The marketing site you are reading is separate from the app, and collects nothing. It has no contact form, no analytics, no advertising, and sets no tracking cookies.

One thing is saved on your own device: if you switch this site between its light and dark theme, that choice is kept in your browser’s local storage under promoproof-theme so the page doesn’t change back on your next visit. It never leaves your browser, and clearing your site data removes it.

Data is stored only to provide the service you installed the app for: keeping you authenticated, running the checks you ask for, showing you the results and their history, and enforcing the limits of your plan.

It is not used for advertising, not sold, and not used to build a profile of you or your store beyond what the product itself displays back to you.

PromoProof communicates with Shopify in order to function. That is inherent to the product: it reads your discounts from Shopify’s Admin API and builds test carts through Shopify’s Storefront API. Shopify’s own terms and privacy policy govern that relationship.

Beyond Shopify, the app depends on third-party hosting and database infrastructure to run at all. Those providers process the data described above only to keep the service running, on our instructions, and for no purpose of their own.

A current list of those providers is available on request — write to info@promoproof.app and you will get the names.

Your data is not sold, rented, or shared for any other purpose.

Data is kept for as long as the app is installed on your store, so that your test history stays available to you. There is no separate archive: what you see in the app is what exists.

When you uninstall PromoProof, Shopify sends an app/uninstalled webhook and the app’s session for your shop is removed immediately. Shopify then sends a shop/redact webhook 48 hours after uninstallation, and your shop’s remaining data is erased on receipt of it.

You can also ask for deletion at any point without uninstalling, by writing to info@promoproof.app.

Depending on where you are established, you may have the right to access, correct, export, or erase the data described in this policy, and to object to or restrict its processing.

To exercise any of these, contact info@promoproof.app. If you believe your data has been handled improperly, you may also complain to your local data protection authority.

Access to your store is limited by the scopes listed above, which are the smallest set the product can function with. The app holds no ability to change your store, so the worst case for a compromised session is disclosure of your discount and product configuration — not modification of it.

Sessions are stored server-side and communication with Shopify uses encrypted connections.

If the app’s behaviour changes in a way that affects this policy — a new scope, a new subprocessor, a new category of stored data — this page is updated and the date at the top changes with it.

Any change that expands what PromoProof accesses would require you to approve the new permissions in Shopify before it could take effect.

Questions about this policy, or about what PromoProof does with your data, can go to info@promoproof.app.

See also the Terms of Service, which cover the use of the service itself and the limits of what its results mean.