Privacy policy

Who we are

LinkSpot is made and operated by ReyCommerce Studio SRL, registered at Splaiul Independentei 202B, Camera 42, 060023 Bucuresti, Romania.

Write to heylinkspot@gmail.com about anything in this policy.

What we collect

Store information

When you install the app from the Shopify App Store, Shopify gives us the information the app needs to run in your store. We store three things.

• Your shop domain, for example example.myshopify.com.
• The store owner email address.
• A Shopify access token, used to talk to the Shopify Admin API on your behalf.

This is needed to sign you in and to let the app work inside your store.

Store data the app reads

To do its job, the app reads a limited part of your store through the Shopify Admin API. That is your products, product images, product variants and collections.

The app does not keep a copy of your product information. It stores only references to resources that live in Shopify, such as product ids, product image ids, and the id of the product an interactive element points to. Those references are what let the app show and manage the elements you build.

What we do not collect

• No card details. Billing goes through Shopify and the app never sees a card number.
• No personal data about your shoppers. See the next section.
• No session recordings, no heat maps, no tracking of individual visitors.

How we use it

The information is used only to run the app and to make it better. In practice that means we use it to sign the app in to your store, to let you create and manage interactive elements on your product images, to show related products through hotspots and product sets, and to keep your settings and layout.

We do not sell merchant data and we do not rent it.

We use Google Analytics and Meta to measure our ads. Shopify reports to both when someone views the LinkSpot listing on the Shopify App Store, clicks its Install button or finishes an install. The report of an install carries your shop's name and web address, and Google also receives your shop's Shopify id. Apart from these reports, we do not share merchant data with anyone for marketing.

Your shoppers

The app does not collect or process personal data about the people who visit your shop.

On the storefront, the app only draws the elements on your product images and reads product information straight from Shopify. It sets no cookies of its own, it collects no visitor identifiers, and it sends no tracking data back to us.

Who the data is shared with

We use a small number of services to run the app. Each one handles the data only to provide its service, and each one is required to keep it secure and confidential.

• Shopify, which hosts your store and handles billing.
• Railway, which hosts the app servers and the database.
• Resend, which sends the operational emails the app has to send you.
• PostHog, hosted in the European Union, which records how the app is used and tells us when it breaks.

PostHog is given the shop domain, the plan the store is on and which screen of the app was opened. It is not given your email address, your Shopify access token or anything about your customers, and the parts of the app that run on your storefront send it nothing at all.

How long we keep it

We keep merchant data only for as long as we need it to provide the app. When you remove the app from your store, the data that belongs to it is deleted, following Shopify's rules on data retention and the GDPR.

Security

We take reasonable technical and organisational measures to protect merchant data against unauthorised access, change, disclosure or loss. Access to stored data is restricted, and it is used only for what this policy describes.

Your rights

You can ask at any time for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Send the request to heylinkspot@gmail.com and we will answer it as data protection law requires.

The app also answers Shopify's own privacy webhooks for customer data requests, customer deletion and shop deletion.

This website

The sections above are about the app. This one is about linkspotapp.com.

Without your consent

This website sets one cookie of its own, and only when you open an example on the demo store. It holds the address of that example for ten minutes, so the demo store can take you there after its password page, and the demo store deletes it when you arrive. The font is served from this domain instead of a font CDN.

Page views are counted with PostHog, the same service named above, and with Cloudflare Web Analytics. Both are set up without cookies and without browser storage, so neither keeps an identifier that could follow you to another site or recognise you on a later visit.

Links to the Shopify App Store carry tags that name the page and the button they sit on, so we can see which ones lead to installs. The tags say nothing about you.

The site is served by Cloudflare, which processes the request data its network needs to deliver the page and to block abuse.

With your consent

A small bar at the foot of the page asks whether we may use cookies from Google and Meta. Nothing from Google and Meta loads until you accept. If you decline or do not answer, nothing loads.

• Google Analytics counts visits and shows which pages lead to an install. Its cookies have names that start with _ga and last up to two years. When it is linked to our Google Ads account, the same tag also measures our Google ads and lets them be shown again to people who visited this site.
• Meta Pixel measures our ads on Facebook and Instagram and lets them be shown again to people who visited this site. Its cookies are _fbp and _fbc, and they last up to 90 days.

If you arrived from one of our ads and accepted, the links to the Shopify App Store carry that ad's tags, so an install can be counted for the ad.

Google and Meta are based in the United States and receive this data under the EU-US Data Privacy Framework.

Your answer is kept in your browser for six months, and then the bar asks again. To change it, use Cookie settings at the foot of any page.

Changes to this policy

We may update this policy to reflect changes in how we work, or in the law. When we do, the date at the top of this page changes.

Contact

Questions about this policy, or a request about your data, go to heylinkspot@gmail.com. Questions about using the app are usually answered faster in the documentation.