Privacy Policy

1. Introduction

Welcome to Communify. We are fully committed to protecting the privacy and security of your personal data, as well as the data of your store's customers. This Privacy Policy outlines our procedures regarding the collection, processing, use, and disclosure of information when you install and use the Communify application (the "App") on your Shopify store.

By installing the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with any terms of this policy, please do not install or use the App.

2. Information We Collect

To provide our subscription management, Skool community syncing, and billing services, we collect and process information from your Shopify store and your customers. This includes:

• Merchant Information: Your shop name, primary email address, owner name, shop domain, physical address, and Shopify access tokens.
• Customer & Subscriber Data: Information about customers who purchase subscriptions, including names, email addresses, phone numbers, order histories, billing details, and subscription contract details. We do not store or process raw payment card details directly (these are handled securely by Shopify or your payment gateway, e.g. Stripe).
• App Usage & Technical Data: Logs of actions performed within the app, IP addresses, browser specifications, and device metrics to monitor performance and maintain security.

3. How We Use Information

We use the information we collect to run the core subscription platform and deliver value to you. Specifically, we use it to:

• Create, update, and manage subscription contracts for your customers.
• Facilitate recurrent billing and manage failed billing attempts automatically.
• Synchronize subscriptions with external platforms like Skool when you configure our Skool Integration.
• Communicate with merchants regarding subscription status, billing notices, and platform updates.
• Optimize performance, fix bugs, and secure our system against unauthorized access.

4. Sharing Your Data

We value your trust. We do not sell, trade, or rent your store or customer personal information to third parties. We share information only with trusted processors necessary to deliver our services, including:

• Shopify: To fetch data, sync webhooks, update subscription objects, and charge customers.
• Email Service Providers: To send transactional emails such as subscription confirmation, invoices, and billing issues.
• Skool: When explicitly enabled by you to sync merchant member invites or community access.
• Database & Hosting Services: Secure cloud infrastructure where all data is stored with encrypted connections.

5. Data Retention & Deletion

We retain your information for as long as your Shopify store has the App installed or as needed to comply with our legal obligations.

If you uninstall the App, we will mark your store as inactive. In compliance with Shopify’s data protection requirements, we will automatically delete stored customer personal information in our systems within 48 hours of receiving a shop uninstallation webhook, unless we are legally required to retain it.

6. Your Rights (GDPR/CCPA)

If you or your customers reside in the European Economic Area (EEA), UK, or California, you are entitled to specific privacy rights under the GDPR and CCPA. These include:

• The right to access the personal information we hold about you or your customers.
• The right to request that your personal information be updated or corrected.
• The right to request the deletion or restriction of your personal information.
• The right to withdraw consent at any time where processing is based on consent.

Merchants are responsible for handling their own customers' GDPR/CCPA requests, but we are fully prepared to assist you in executing deletion or access requests.

7. Security Practices

We implement robust security measures to protect the integrity of your personal information. All network traffic is encrypted using Secure Socket Layer (SSL/TLS) technology. We strictly limit internal database access and employ regular monitoring to safeguard your database records against intrusion or loss.

8. Contact Support

If you have any questions, concerns, or requests regarding this Privacy Policy, please feel free to reach out to our legal compliance and support team.