Privacy Policy

When you install BatchCard on your Shopify store, we collect the following information:

• Shopify OAuth data: Your store name, store owner email address, and access tokens required to operate the app within your Shopify admin.
• Gift card batch data: Gift card values, codes, quantities, recipient email addresses (when using email delivery), batch names, tags, and notes that you create through BatchCard.
• Contact form submissions: Name, email address, store URL (if provided), topic selection, and message content submitted through our contact form.
• Analytics data: Anonymized usage data collected through Google Analytics (GA4) with your consent. This includes page views, session duration, and general device information. No personally identifiable information is sent to Google Analytics.

We use the information we collect to:

• Provide the BatchCard service, including creating gift card batches, capturing codes, and delivering gift cards via email.
• Process gift card operations on your behalf through the Shopify API.
• Respond to support inquiries submitted through our contact form.
• Improve the service based on anonymized usage patterns.

We do not sell your data to third parties. We do not use your data for advertising purposes.

BatchCard connects to your Shopify store through OAuth, the standard authentication method for Shopify apps. During installation, you authorize BatchCard to access specific store data.

BatchCard requests only the permissions necessary to manage gift cards on your behalf. This includes the ability to create, read, and manage gift cards within your store. We do not access your customer data, order history, financial information, or any other store data beyond what is required for gift card operations.

Access tokens are stored securely and are used only to communicate with the Shopify API on your behalf.

Your data is stored on secure servers with encryption at rest. All data transmitted between your browser, our servers, and the Shopify API is encrypted in transit using HTTPS (TLS 1.2 or higher).

Gift card codes are stored in encrypted format. Access to production data is restricted to authorized personnel only.

We follow industry-standard security practices and regularly review our security measures.

BatchCard uses the following third-party services to operate:

• Google Analytics (GA4): Collects anonymized website usage data with your consent. No personally identifiable information is shared with Google. You can opt out through our cookie settings.
• Resend: Handles email delivery for gift card distribution and contact form submissions. Resend receives recipient email addresses and email content necessary to deliver messages on your behalf.
• Upstash: Provides rate limiting for our contact form to prevent abuse. Upstash receives anonymized IP address hashes and request counts. No personal data is stored by Upstash.

If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data.
• Right to data portability: Request your data in a structured, commonly used format.
• Right to restrict processing: Request that we limit how we use your data.
• Right to object: Object to our processing of your personal data.

To exercise any of these rights, contact us at support@batchcard.app. We will respond to your request within 30 days.

BatchCard uses cookies for essential site functionality and, with your consent, for analytics. Our cookie consent system allows you to control which cookies are active.

You can manage your cookie preferences at any time through our cookie settings page.

We retain your data for as long as your BatchCard account is active (i.e., the app is installed on your Shopify store).

When you uninstall BatchCard, your batch data and gift card codes are retained for 30 days in case you reinstall. After 30 days, all data associated with your store is permanently deleted.

You can request immediate deletion of all your data at any time by contacting us at support@batchcard.app.

We may update this privacy policy from time to time. When we make significant changes, we will notify you through the BatchCard app or via the email address associated with your Shopify store.

Minor clarifications or formatting changes may be made without notice. The “Last updated” date at the top of this page reflects the most recent revision.

For questions about this privacy policy or how we handle your data, contact us at support@batchcard.app.