Privacy Policy

Last updated: 18 July 2026

This Privacy Policy explains how ComposeKit (“ComposeKit”, “we”, “us”, or “our”) collects, uses, and protects information when you install and use the ComposeKit application (the “App”) on your Shopify store.

1. Who we are

ComposeKit is developed and operated by [Your Legal / Company Name] (“the Developer”), located at [Company Address]. For any privacy questions, contact us at aktofy.store@gmail.com.

2. Information we collect

When you install the App on your Shopify store, we may collect and process the following, via the Shopify API and with the permissions you grant:

Store & account information

• Store name, domain (*.myshopify.com), store ID, and primary contact email.
• Store settings such as currency, timezone, and plan type.
• The Shopify access token that authorizes the App to act on your behalf.

Product & catalog data

• Products, variants, collections, prices, images, and inventory — used to build and display bundles and configurators.
• Bundle/configurator configurations you create within the App.

Order & checkout data

• Order line items, quantities, and applied discounts — used to apply bundle pricing and report performance.

Usage & analytics

• Widget views, add-to-cart events, and conversions per configurator, so we can show analytics in the App.
• Basic technical logs (IP address, browser type, timestamps) for security and debugging.

3. How we use information

• To provide, operate, and maintain the App’s features (bundles, volume discounts, mix & match, BOGO, configurators, free gifts).
• To apply discounts automatically at checkout using Shopify’s discount/functions APIs.
• To display analytics and performance metrics to you.
• To provide support and respond to your requests.
• To detect, prevent, and address technical issues, fraud, or abuse.
• To comply with legal obligations.

We do not use your data for advertising, and we do not sell your data or your customers’ data to third parties.

4. Customer data

The App is designed to operate primarily on product, bundle, and order data. Where the App processes limited customer-related information (for example, order contents needed to apply a bundle discount), it does so only to deliver the App’s functionality. We do not store customer payment details; payments are handled entirely by Shopify.

5. Sharing & third parties

We share information only as needed to run the service:

• Shopify — the platform the App runs on. Your use of Shopify is governed by Shopify’s Privacy Policy.
• Infrastructure & hosting providers — used to host the App and store configuration data securely. [e.g. your cloud/hosting provider].
• Legal — where required by law, regulation, or valid legal process.

All third parties are bound to protect your information and use it only for the purposes described here.

6. Data retention & deletion

We retain your data only for as long as the App is installed and as needed to provide the service. When you uninstall the App, or on request, we delete or anonymize the associated store data within 30 days, except where retention is required by law.

ComposeKit complies with Shopify’s mandatory GDPR webhooks, including customers/redact, shop/redact, and customers/data_request, to honor data-deletion and data-access requests.

7. Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS/TLS), restricted access controls, and secure storage of access tokens. No method of transmission or storage is 100% secure, but we work to protect your data using commercially reasonable safeguards.

8. Your rights (GDPR / CCPA)

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at aktofy.store@gmail.com. We will respond within the timeframe required by applicable law.

If you are in the EEA/UK, our legal basis for processing is the performance of our contract with you (providing the App) and our legitimate interests in operating and improving the service. If you are a California resident, we do not sell personal information as defined by the CCPA.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, notifying you within the App. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

10. Contact us

If you have any questions about this Privacy Policy or our data practices, contact: