AppVerix Downloads: Privacy Policy

Last updated: 19 October 2026

AppVerix Downloads (“the app”) is a Shopify app published by AppVerix (“we”, “us”). This policy explains what the app collects when a merchant installs it, why, where it is kept and how to have it deleted.

The merchant is the controller of their customers’ data. We are the processor for the buyer email, order identifiers, assigned license keys and download log needed to deliver files.

1. What we collect and why

From the merchant’s store, through Shopify’s API and webhooks:

  • Shop domain: to identify the store and open the app in Admin. Stored.
  • An access token from Shopify: so the app can stay installed and read products and paid orders. Stored in the login session until you uninstall.
  • Product and variant ids, titles, and the files you attach (name, size, type, storage key, limits). Stored.
  • License key pools and key values you upload or we generate, plus assignment state. Stored.
  • On a paid order: order id and name, customer id, buyer email, assigned keys, download tokens. Stored so we can email the buyer and show links on the order page.
  • Download log: time, file, order, success or reason, hashed IP, user agent. Stored.
  • Shop settings and billing state (plan, trial or none). Billing is cached; Shopify is the source of truth.
  • Compliance log: the topic and a short summary of a privacy webhook (shop id, customer id, order ids). No names or emails in that log.

2. What we do not collect

We do not store addresses, phone numbers, payment card data or cart contents. We do not set advertising cookies or use analytics pixels. Download IPs are hashed with a server secret before storage and cannot be reversed from the log alone.

3. Who processes data for us

Where data leaves the EEA/UK, we rely on the provider’s Standard Contractual Clauses or other approved transfer mechanisms.

  • Cloudflare (cloudflare.com): hosting, D1 database and R2 object storage. Sees section 1 and the file bytes. Globally distributed.
  • Shopify: the platform the app runs on, which also handles billing. See Shopify’s privacy policy.
  • Resend (resend.com): sends merchant welcome/cancel emails and buyer delivery emails from support@mail.appverix.com, only when a RESEND_API_KEY is configured. Sees the recipient address and the email body (download links and keys).

4. How long we keep it

  • Files, pools, deliveries and logs: while the app is installed, or until you delete them.
  • When you uninstall: we delete the login session right away. Shopify sends a shop/redact request about 48 hours later and we then delete the store’s files, keys, deliveries, logs and settings.
  • A customer deletion request (customers/redact): we remove that customer’s email, assigned keys, tokens and delivery rows for the store.
  • Server logs: up to 7 days.

5. Your rights and data requests

The app supports Shopify’s three privacy webhooks: customers/data_request (we compile the deliveries and keys we hold for that customer id), customers/redact (we delete that customer’s delivery data) and shop/redact (we delete all data of the store).

Merchants can also write to support@appverix.com for a copy of their data or to have it deleted. We answer within 30 days. A store’s customers should contact the store first. If you are in the EEA/UK you may complain to your local data protection authority. In Brazil the LGPD applies; contact us at the same address.

6. Security

  • All traffic uses HTTPS (TLS).
  • The database runs on Cloudflare D1, which encrypts data at rest. Files sit in R2 or your S3 bucket.
  • Webhooks from Shopify are verified by their HMAC signature; unsigned requests are rejected.
  • The app checks a Shopify session token on every admin request and uses no third-party cookies.
  • Download tokens are HMAC-signed and bound to one order line.
  • Access to production infrastructure is restricted and protected by two-factor authentication.
  • If a breach affects your data we tell you without undue delay, and within 72 hours where the law requires it.

7. Data processing agreement and security

For the personal data of a store’s customers, the merchant is the controller and we are the processor. The AppVerix Data Processing Addendum sets out our commitments (purposes, subprocessors, security, deletion, breach notification), and our security and incident response policy describes how we protect and handle data.

8. Changes and contact

If we change this policy in a way that matters, we update the date at the top and tell merchants in the app or by email. Contact: support@appverix.com