Rulehop Privacy Policy

Effective date: July 26, 2026

This policy explains what information Rulehop ("we", "us") collects when you install and use the Rulehop: Discount Rules app for Shopify, how we use it, and the choices you have. We've kept it short and in plain language on purpose — there is no fine print here that says something different from the summary.

The short version: we collect the minimum we need to run the app for you — your store's domain, your email address, and the discount rules you create. We do not collect or store personal information about your store's customers. We never see payment details. When you uninstall, your data is deleted.

1. Who we are

Rulehop, operated by Krishna A M (India), is the developer of the Rulehop: Discount Rules app (apps.shopify.com) and the data controller for the information described in this policy. We operate this app and the website rulehop.com. For anything in this policy, contact us at [email protected].

2. Information we collect

When you install the app, Shopify provides us with:

• Your store's domain (e.g. your-store.myshopify.com)
• Your account email address — used to operate the app and, if you contact support, to reply to you
• Your Shopify plan and app billing status — so we know which Rulehop plan features to enable

While you use the app, we store:

• The discount rules you create — conditions, discount values, schedules, names, and settings
• Product, collection, and market references your rules point at (IDs and titles only — so your rules can display "10% off the Serums collection" instead of a raw ID)
• Deployment history — when a rule was published or unpublished, so you can see the state of your discounts

3. Information we do NOT collect

We deliberately request the narrowest Shopify permissions the app can run on (write_discounts, read_products, read_markets). This means:

• We do not collect, store, or process personal information about your store's customers — no names, emails, addresses, or order histories.
• We never receive or store payment or card details — yours or your customers'. All app billing is handled by Shopify's own billing system.
• When your discounts run at checkout, that logic executes inside Shopify's own infrastructure (Shopify Functions). Cart and customer data at checkout is processed by Shopify and is not transmitted to Rulehop's servers.

4. How we use your information

• To run the app: build, save, test, and publish your discount rules
• To operate your plan and billing state (via Shopify's billing system)
• To answer your support requests
• To monitor errors and keep the app reliable
• To send you important service messages about the app (not marketing)

We do not sell your information, and we do not use it for advertising.

Legal bases. Where the GDPR or similar laws apply, we process your information on these bases: performance of a contract (running the app and your plan — sections 2 and 4 above); legitimate interests (error monitoring, service reliability, responding to support requests, and service messages — interests balanced against your rights); and consent, where we ask for it separately. We do not process any special categories of personal data.

5. Service providers

We use a small number of third-party service providers to operate Rulehop. Each is bound by data-protection terms and receives only the data necessary for its role:

• A hosting and database provider — stores the app data described in section 2.
• An AI provider that powers the plain-English rule builder — receives only the text of the discount description you type (e.g. "10% off orders over $100"), with no store credentials and no customer data. It does not use these inputs to train its models.
• An error-monitoring provider — receives technical error reports, scrubbed before sending: store domains are replaced with anonymous identifiers and identifying URL parameters are removed.
• A support-chat provider (only if you open the chat) — receives your store domain and email so we can help you, plus whatever you type in the chat.

Shopify, as the platform the app runs on, also processes your store and app data under its own privacy policy.

6. Data retention and deletion

• We keep your data for as long as the app is installed on your store.
• When you uninstall, Shopify sends us a deletion request, and we delete your store's data — rules, references, and deployment history — within 30 days.
• Residual copies may persist in encrypted backups for a short period after deletion and are purged on the backup rotation cycle.
• We may retain limited records where a law requires it (for example, records relating to billing history).
• Because we hold no customer personal data, customer data requests and deletion requests from Shopify (GDPR webhooks) are acknowledged automatically; there is nothing to return or erase on our side.

7. Security

All data is encrypted in transit (HTTPS/TLS). Access to production systems is limited to the developer. Error reports are scrubbed of identifying information before leaving the app (see section 5).

8. International transfers

Our servers and service providers are located in the United States and other regions, and your data may be processed there. Where data moves out of the EEA or UK, we rely on recognized transfer mechanisms — Standard Contractual Clauses (SCCs) and, where applicable, certification under the EU-US Data Privacy Framework.

9. Your rights

Depending on where you are located (including under the GDPR, UK GDPR, and similar laws), you may have the right to access, correct, export, restrict, object to the processing of, or delete your personal information. Since the personal information we hold about you is limited to your store domain and email address, the fastest path for any of these is simply emailing [email protected] — we respond to all verified requests within 30 days. You also have the right to complain to your local data protection authority.

We do not make automated decisions about you that produce legal or similarly significant effects.

10. Cookies

The embedded app uses only the session mechanisms required for Shopify's admin to authenticate you (no advertising or cross-site tracking cookies). The rulehop.com marketing website does not use advertising cookies.

11. Children

Rulehop is a business tool for Shopify merchants and is not directed at children under 16. We do not knowingly collect information from children.

12. Changes to this policy

If we make material changes, we will update the effective date above and, for significant changes, notify you inside the app or by email. Continued use of the app after a change means you accept the updated policy.

13. Contact

Questions, requests, grievances, or complaints: [email protected]