Privacy Policy - VI Product Badge

1. Introduction

Welcome to the Privacy Policy for VI Product Badge (referred to as "the App" or "our Service"). The App is owned and operated by Vision Infotech (referred to as "we", "us", or "our").

This Privacy Policy is designed to inform you, the merchant, about how we collect, use, store, protect, and share information when you install and use our App on your e-commerce-powered store, and to ensure full compliance with app store requirements and global privacy standards including the General Data Protection Regulation (GDPR).

By installing and using VI Product Badge, you agree to the collection and use of information in accordance with this policy. If you do not agree with any terms in this policy, please uninstall the App immediately.

2. Data We Collect

To provide high-performance product badge styling, automatic targeting, and a seamless merchant experience, we collect specific shop information when you install and authorize our App.

We Collect the Following Information:

Shop Information: Your primary shop domain (e.g., your-store.my-ecommerce-shop.com), store name, account owner's email address, store country, default currency, and platform plan type.
Product & Collection Data: In order to target badges dynamically based on conditions (such as prices, inventory, tags, discounts, and collections), we synchronize and process your catalog data. This includes product IDs, titles, prices, tags, options, variants, inventory levels, and collection associations.
Platform Metafields: We write and manage product badge configuration and layout settings directly into your store's native platform metafields. This ensures near-instant badge rendering on your storefront and maximum performance.
OAuth Credentials: Secure platform offline access tokens to communicate with the platform's REST and GraphQL Admin APIs on your behalf.

No Customer Personal Data: Our App is designed to minimize the storage of customer data. We do not track, collect, or store any personal information of your customers (such as names, billing/shipping addresses, phone numbers, or payment info). All storefront interactions run within the platform's secure app sandbox using native metafields and App Embed blocks.

3. How We Use Data

We use the data collected strictly for serving, managing, and optimizing the App services on your store. Specifically, data is used to:

Configure, customize, and render beautiful promotional badges, labels, and ribbons on your storefront.
Automate badge targeting by evaluating product conditions (e.g., checking if a product is "On Sale" or "Out of Stock" in real-time).
Synchronize product catalogue updates in the background to ensure that active badge displays always match your latest inventory and pricing.
Restore your custom badge settings and configurations automatically in case you temporarily uninstall and subsequently reinstall the App.
Provide personalized customer support, diagnostic investigations, and technical troubleshooting should you contact our team.

4. Storage & Protection

We are dedicated to maintaining the confidentiality and integrity of your merchant data. We employ robust, enterprise-grade measures to secure and protect your information:

Secure Hosting: Our servers and PostgreSQL databases are hosted in secure, isolated virtual private cloud environments with active firewalls and DDoS protection.
Encryption: All network communication between the platform, our backend server, and your storefront is protected using high-grade HTTPS (SSL/TLS) encryption.
Token Isolation: Platform OAuth offline tokens are encrypted at rest and stored with restricted access permissions. We actively support expiring offline access tokens to rotate credentials automatically and minimize security risks.
No Selling/Sharing: We do not sell, rent, license, distribute, or share any of your store's information, product configurations, or operational data with third-party advertisers, data brokers, or marketing networks.

5. GDPR Compliance & Webhooks

The General Data Protection Regulation (GDPR) regulates how companies handle the personal data of European Union residents. Under GDPR, we act as a Data Processor with respect to your store's configuration settings, while you (the merchant) act as the Data Controller.

To fully support your compliance, our App has built-in integration with the platform's mandatory GDPR webhooks and processes them immediately upon receipt:

GDPR Webhook Responses:

customers/data_request

Triggered when a customer requests access to their personal data stored by your shop. Since VI Product Badge does not capture, track, or store customer personal data, we respond immediately to confirm zero customer records are stored.

customers/redact

Triggered when a customer requests their personal data to be deleted from your shop. We do not store customer records, so we immediately confirm compliance and zero-action needed to the platform.

shop/redact

When received, we initiate a background process that permanently deletes all stored shop details, access credentials, and historical badge settings from our production databases.

6. Uninstall & Deletion

When you uninstall VI Product Badge from your e-commerce store, we pause background synchronization routines immediately and mark your authorization credentials as inactive.

Merchant Onboarding Preservation: We preserve your badge configuration rules and theme configurations temporarily. This allows you to reinstall the App in the future and instantly restore your complete setups without starting from scratch.

Permanent Data Purging: If you would like your database records to be permanently deleted immediately upon uninstallation, you can submit a manual deletion request to our support email at [email protected]. We will permanently wipe all your store configuration settings within 24 hours of verifying your request.

7. Contact Information

For any questions regarding this Privacy Policy, your store's data integrity, or to make an immediate, permanent data deletion request, please do not hesitate to contact our dedicated data protection team:

Company: Vision Infotech

Support Email: [email protected]