Privacy policy

Last updated: November 3, 2026 · Effective: [EFFECTIVE DATE]

This policy explains how [LEGAL ENTITY NAME] ("Playbuy", "we", "us") handles personal data when:

• a Shopify merchant installs and uses the Playbuy — Shoppable Video & UGC app (the "App") and its dashboard at app.playbuy.app;
• shoppers visit a store that uses Playbuy widgets or our web pixel; and
• anyone visits our website at playbuy.app.

In short: we collect as little as we can. We never receive or store shoppers' names, email addresses, phone numbers, postal addresses or payment details. We do not sell personal data or use it for advertising.

1. Who is responsible for your data

• Merchants and their staff: we are the controller of the account data described in section 2.1.
• Shoppers on a merchant's store: the merchant is the controller, and we are its processor (a "service provider" under US state laws). We handle this data only on the merchant's instructions, under our Data Processing Addendum. If you are a shopper, please read the privacy policy of the store you visited and contact that store first.
• Visitors to playbuy.app: we are the controller.

[LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Privacy contact: [CONTACT EMAIL]. EU representative: [EU REPRESENTATIVE NAME AND ADDRESS, IF REQUIRED]. UK representative: [UK REPRESENTATIVE NAME AND ADDRESS, IF REQUIRED].

2. What we collect

2.1 Merchants and staff (we are controller)

• Shop details from Shopify: store domain, store name, store contact email, currency, money format, time zone, Shopify plan, granted permissions and install dates.
• Staff account data: name and email address (from Shopify when a staff member opens the App, or entered when you invite a teammate), whether the email is verified, role, and team membership history.
• Sign-in and security data: session records (stored as a one-way hash of the session token), browser user agent, sign-in timestamps, and a log of account actions such as invitations, connections and plan changes. IP addresses are used briefly to limit repeated sign-in attempts and are not stored in our database.
• Access credentials: the access tokens Shopify and connected platforms issue to us, encrypted with AES-256-GCM.
• Billing status: your plan, trial and subscription status as reported by Shopify, and your monthly view count. Shopify handles payment; we never see card details.
• Product data: titles, handles, images, prices, variants and availability of your products (read-only), so widgets can show them.
• Content: videos, poster images, captions, product tags and widget settings you create, upload or import.
• Connected accounts: if you connect Instagram (Instagram API with Instagram Login), we receive an access token, the account's user ID and username, and the media you choose to import. We use these only to import your videos.
• Support messages: anything you send us by email.

2.2 Shoppers on a merchant's store (we are processor)

• Widget events: when a shopper sees or uses a widget we record the event type (impression, play, view, completion, product click or add to cart), the widget, video and product involved, any A/B test group, and the time.
• Pseudonymous visitor ID: a random ID kept in a first-party cookie on the store's domain. It is set only when Shopify's Customer Privacy API reports that the shopper has allowed analytics. Without that permission, no ID is set, any existing ID is removed, and events are recorded without one.
• Order data for attribution: when a shopper who allowed analytics completes checkout, our Shopify web pixel sends the order ID, order total, currency, and for each line the product ID, variant ID, quantity and line total. The pixel never reads the shopper's name, email, phone number or address.
• IP address and browser details: our event servers receive the shopper's IP address and user agent with each request. The IP address is turned into a one-way hash straight away and used only to limit abuse and to count a video view once per day; that hash is kept for about 26 hours and the IP address itself is not stored. The user agent is used to filter out bots and is not stored.

We do not use storefront data to build profiles of shoppers across different stores, and we do not combine it with data from other sources.

2.3 Visitors to our website

playbuy.app does not use analytics, advertising or tracking cookies, and does not load third-party trackers. Our hosting and network providers process standard technical data, such as IP address, browser type and the pages requested, to deliver and secure the site. Demo videos on the site stream from Cloudflare. See our cookie and tracking notice.

3. How we use data and our legal bases

For data we control, the legal bases below apply under the EU and UK GDPR.

For shopper data, we act on the merchant's behalf, and the merchant decides the legal basis. Our widgets and web pixel only use a persistent identifier, and the pixel only runs, when the shopper has allowed analytics through the store's consent tools. We do not use any personal data for automated decisions that have legal or similarly significant effects.

We do not send marketing emails today. If we start, we will ask for consent where the law requires it and include an unsubscribe link.

4. Who we share data with

We do not sell personal data, and we do not share it for cross-context behavioural advertising. We share data only with:

• Service providers who run the App for us, under contracts that require them to protect it: Railway, Cloudflare, Resend, Shopify. The full list, with locations, is on our subprocessors page.
• Platforms you connect, such as Instagram, only as needed to carry out what you ask (for example, to import your videos).
• Authorities or others where the law requires, or where needed to protect rights, safety or the security of the App.
• A buyer or successor if we are involved in a merger, acquisition or sale of assets, subject to this policy.

5. How long we keep data

When a merchant uninstalls the App:

• Straight away, we delete the store's Shopify access tokens, sign out staff sessions for that store, and stop serving its widgets.
• About 48 hours after uninstall, Shopify sends us a shop/redact request. We then delete the store's data, including videos, images, widget files, events, analytics, attribution records, team memberships, invitations and connected-account tokens.
• A staff member's own user record (name and email) may remain if they belong to another store using Playbuy, or until they ask us to delete it.
• We keep a minimal record that the deletion request was received and carried out, as evidence of compliance.

6. Shopify privacy requests

We support Shopify's mandatory privacy webhooks:

• customers/data_request: we do not hold shoppers' contact details, so there is no customer-identifying data to export. We log each request.
• customers/redact: we delete the attribution records for the listed orders and the widget events linked to those orders' visitor IDs.
• shop/redact: we delete the store's data as described above.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict how we use it, and to withdraw consent at any time. Merchants can export their video list and analytics as CSV files from the dashboard.

To use a right, email [CONTACT EMAIL]. We may need to confirm your identity. We will reply within one month (45 days for US state law requests), and tell you if we need longer. If you are a shopper, please contact the store you visited; it controls that data and we will help it respond. You can also complain to your data protection authority, such as the authority in your EU country or the UK Information Commissioner's Office.

8. Notice for California and other US states

This section applies to residents of California and other US states with consumer privacy laws.

• Categories collected in the last 12 months (for merchants and staff, where we are a business): identifiers (name, email, account IDs); commercial information (plan and billing status); internet or electronic activity (sign-in and usage records); and audio-visual content you upload. Sources, purposes and retention are described above.
• Sensitive personal information: we do not collect it for the purpose of inferring characteristics. Account sign-in credentials are used only to provide the App.
• Selling and sharing: we do not sell personal information or share it for cross-context behavioural advertising, and we have not done so in the last 12 months. We have no actual knowledge of selling or sharing data of anyone under 16.
• Disclosures for a business purpose: to the service providers listed in section 4, for hosting, storage, video delivery and email.
• Your rights: to know, access, correct and delete, and not to be treated differently for using them. You can use an authorized agent; we may ask for proof of authority.
• Shoppers: for storefront data we are the merchant's service provider. Please send requests to the store.

9. International transfers

We and our main providers process data in the United States, and some providers (such as Cloudflare's delivery network) operate worldwide. When we transfer personal data from the EEA, UK or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum and Swiss equivalents, or on a provider's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions where it holds one. You can ask us for a copy of the relevant safeguards.

10. Security

We use encryption in transit (HTTPS) everywhere, encrypt access tokens at rest with AES-256-GCM, scope every database query to a single store, verify Shopify requests with HMAC signatures, and remove secrets and email addresses from our logs. No system is perfectly secure. See our security page. To report a vulnerability, email security@playbuy.app.

11. Children

The App and our website are business tools and are not directed at children. We do not knowingly collect personal data from children under 16. Our storefront features do not identify shoppers or their age; merchants whose stores target children must make sure their use of the App meets the laws that apply to them.

12. Changes to this policy

We will post any changes on this page and update the "Last updated" date. If a change is material, we will tell merchants by email or in the dashboard before it takes effect.

13. Contact

[LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Privacy questions and requests: [CONTACT EMAIL]. Security reports: security@playbuy.app.