Privacy Policy
On this page
1. Overview
InfluenceGift (“the App”) is a Shopify application developed and operated by devhoot, a software studio based in Spain (“devhoot”, “we”, “us”). The App lets Shopify merchants create gift codes that give influencers and VIP customers a configurable number of products for free at checkout.
This Privacy Policy explains what information we access through the Shopify platform, how we use and protect it, how long we keep it, and the rights available to you. We have designed InfluenceGift to collect as little data as possible — and to store no personal customer data at all.
This policy applies to the InfluenceGift app and the devhoot.com marketing website. It does not cover third-party services or any other websites linked from this site.
2. Information we access & store
When a merchant installs InfluenceGift, the App requests a limited set of Shopify Admin API permissions. We only request the scopes required to create and manage gift codes:
| Permission | Why we need it |
|---|---|
write_discounts | Create and update the discount codes that power gifting. |
read_discounts | Display your existing gift codes on the dashboard. |
read_products | Determine which products are eligible for a gift code. |
read_collections | Let you target specific collections in the collection picker. |
read_orders | Detect when a gift code was used, to record an anonymous usage event. |
Data we store
We store only the configuration and operational data needed to run the App:
- Gift-code configuration — your shop domain, the Shopify discount ID, the discount code string, your internal label, whether it applies to all products or specific collections, the collection IDs you selected, the maximum number of free products, the free-shipping flag, total and per-customer usage limits, expiry date, active status, and the creation timestamp.
- Shop record — your shop domain, plan type (free/pro, for future billing), and the installation timestamp.
- Gift events (anonymous) — your shop domain, the gift code that was used, the Shopify order ID, and a timestamp. These let us show usage counts and, in the future, analytics. They contain no customer identity.
3. Customer personal data — we don’t store it
InfluenceGift does not collect, store, or process the personal data of your customers or influencers. We do not keep names, email addresses, shipping addresses, phone numbers, payment details, or IP addresses of shoppers. The gifting logic runs inside Shopify’s native checkout via Shopify Functions; we only ever reference an order ID and the code that was applied.
4. How we use information
- To create, edit, deactivate, and delete your gift codes in Shopify.
- To display your codes, their settings, and their usage counts in the App dashboard.
- To apply the correct discount at checkout through Shopify Functions.
- To record anonymous gift events for usage counts and future analytics.
- To provide support and respond to your requests.
We do not sell your data, and we do not use it for advertising or profiling.
5. Sharing & sub-processors
We do not share your data with third parties except the infrastructure providers required to operate the App:
- Shopify Inc. — the platform the App runs on. Data is processed through Shopify’s Admin API and Shopify Functions under Shopify’s own terms and privacy commitments.
- Railway — our cloud hosting provider, where the App’s backend and database are hosted.
These providers act as sub-processors and only handle data to the extent necessary to deliver their service. We may also disclose information where required by law.
6. Data retention
We keep your gift-code configuration and shop record for as long as the App is installed. When you uninstall InfluenceGift, your authentication sessions are removed immediately. 48 hours after uninstall, Shopify sends a shop-redaction request and we permanently delete all remaining data for your store — every gift code, every gift event, and your shop record. You can also request earlier deletion at any time (see Your rights).
7. Security
InfluenceGift authenticates exclusively through Shopify OAuth 2.0; we never see or store your Shopify password. Sessions are managed by Shopify’s official SDK. Data is transmitted over encrypted HTTPS connections and stored on access-controlled cloud infrastructure. The App uses only Shopify’s modern GraphQL Admin API and requests the minimum permissions necessary.
8. GDPR compliance webhooks
As required for all Shopify App Store apps, InfluenceGift implements Shopify’s three mandatory privacy webhooks:
customers/data_request— when a customer requests their data, we respond confirming that the App stores no personal customer data.customers/redact— when a customer’s data is to be erased, we confirm there is no personal customer data to delete.shop/redact— sent 48 hours after a merchant uninstalls the App; we permanently delete all data associated with that store.
We also handle the app/uninstalled webhook to clean up authentication sessions when the App is removed.
9. Your rights
Depending on your jurisdiction (including the EEA/UK under GDPR and US state privacy laws), you may have the right to access, correct, export, restrict, or erase the data we hold, and to object to its processing.
Because InfluenceGift stores no personal customer data, these requests normally relate only to your merchant account and app configuration data. If you are a customer of a merchant using InfluenceGift and want to exercise your data rights, please contact the merchant directly.
To exercise any right for data we do hold, email us at support@devhoot.com. We will respond within the timeframe required by applicable law and provide the information or action that applies.
10. Where data is stored
The App’s data is processed and stored on our hosting provider’s cloud infrastructure. Where data is transferred across borders, we rely on appropriate safeguards (such as standard contractual clauses) as required by applicable law. We provide the same privacy rights to all users regardless of their location.
11. Website & cookies
The devhoot.com marketing website does not use advertising or tracking cookies, and does not collect personal information from visitors.
12. Changes to this policy
We may update this Privacy Policy as the App evolves or as laws change. We will revise the “Last updated” date above and, for material changes, provide notice within the App or by email where appropriate.
13. Contact
devhoot is the data controller responsible for the information described in this policy and is based in Spain. Questions about this policy or your data? Contact us at support@devhoot.com. For general support, see our Support page.