Privacy Policy

Overview

Tremidap ("we," "us," or "our") provides Vaqen Bundles, an app for Shopify merchants. This Privacy Policy explains how Vaqen Bundles collects, uses, shares, and retains information when a merchant installs or uses the app and when a shopper interacts with a Vaqen Bundles storefront block.

Shopify separately processes information under its own privacy policy. Merchants are also responsible for their own privacy notices and for responding to their customers as required by applicable law.

Information we collect

Information received from Shopify

When a merchant installs or uses Vaqen Bundles, we receive the merchant's Shopify store domain and app authorization and session information. Depending on the Shopify account and session, this may include a Shopify user ID, name, email address, locale, account role, and granted app permissions.

To provide app features, we access product and variant information, theme and product-template information, discount configuration, and paid-order and line-item information associated with a Vaqen Bundles purchase. We store only the order and line-item fields needed for bundle attribution and merchant reporting, such as order and line-item identifiers, order name, product and variant identifiers, quantity, gross and discounted revenue, currency, and order date.

Information provided by merchants

We store the bundle configuration a merchant creates, including product selection, quantity tiers, percentage discounts, campaign names and schedules, storefront block settings, A/B test settings, and product cost and fee information entered by the merchant for profit and margin calculations.

Information collected from storefront interactions

When a shopper sees or uses a Vaqen Bundles storefront block, the app creates a random attribution identifier and records the store, bundle and product identifiers, assigned A/B variation, selected quantity, and timestamps for a view, click, and attributed paid conversion. The storefront block uses browser local storage to keep a shopper assigned to the same A/B variation for that bundle.

Vaqen Bundles does not require or store a shopper's name, email address, phone number, or postal address for this attribution and reporting flow. Our hosting provider may process routine technical request information, such as an IP address and user-agent, to deliver, secure, and operate the service.

How we use information

We use information described above to:

• authenticate merchants and operate the embedded app;
• create, schedule, display, and manage quantity-break campaigns and their Shopify discounts;
• calculate profit and margin from merchant-entered cost and fee information;
• measure storefront views, clicks, attributed sales, units sold, revenue, and A/B test performance;
• provide reporting and CSV exports to the merchant;
• maintain security, prevent misuse, and troubleshoot errors; and
• comply with legal obligations and Shopify requirements.

We do not sell personal information or use bundle attribution data for advertising, customer profiling, or unrelated purposes.

How we share information

We disclose information only as needed to provide and protect Vaqen Bundles, including to Shopify, our application-hosting provider DigitalOcean, and our database provider Neon. These providers process information on our behalf or as separately described in their own terms and privacy notices.

We may also disclose information when required by law, to protect rights, safety, and the integrity of the service, or in connection with a merger, acquisition, financing, or sale of all or part of the business, subject to applicable legal requirements.

Data retention and deletion

• Unconverted storefront attribution sessions are deleted after 30 days.
• Converted attribution sessions and attributed bundle sales are retained for merchant reporting for up to 730 days, then deleted.
• Shopify authorization and session records are removed when the app is uninstalled.
• Bundle configuration and other store-owned app data are retained while needed to provide the service and are deleted when Shopify sends the required shop-redaction request following uninstall.
• Customer-data request exports are retained only until the applicable customer-redaction or shop-redaction request requires their deletion.

We may retain limited information longer if required by law or reasonably necessary to establish, exercise, or defend legal claims.

International processing

Tremidap is established in Canada. Shopify and our service providers may process information in Canada and other countries where they or their subprocessors operate. Information processed in another country may be subject to that country's laws and lawful access requests. We use service providers and safeguards appropriate to the nature of the information and applicable legal requirements.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Privacy rights and requests

Depending on where a person lives, they may have rights to request access to, correction of, deletion of, portability of, or restriction or objection to certain processing of their personal information. A shopper should first contact the Shopify merchant whose storefront they used. We respond to Shopify's required customer data access, customer redaction, and shop redaction requests and assist merchants with applicable requests.

Merchants and other individuals may contact us using the details below. We may need to verify a request before completing it. A person may also have the right to complain to the privacy or data-protection authority where they live.

Children's privacy

Vaqen Bundles is a business service for Shopify merchants and is not directed to children. We do not knowingly collect personal information directly from children through the app.

Changes to this policy

We may update this Privacy Policy to reflect changes to Vaqen Bundles, our data practices, or legal requirements. We will post the updated policy on this page and revise the effective date.