Privacy policy

Who we are

Zesty Options is a Shopify app operated by Jokolomo Pte. Ltd., UEN 202537155H, 18 Boon Lay Way #02-120, Singapore 609966. Our privacy contact is hello@ludicas.app.

For your own store's customers, you are the data controller and we are your processor: we handle their data only on your instructions, and only for the app to work. Our Data Processing Addendum forms part of our Terms of service and sets out our instructions, security, sub-processor, breach-notice and deletion obligations; email hello@ludicas.app and we will send you a signed copy. For your own account, billing and app usage, we are the controller, and this policy explains how we use that.

What we collect from you

Merchant and staff data:

• Store details from Shopify: shop domain, shop name, contact email, timezone, currency.
• Billing status from Shopify App Pricing: plan, subscription status and current period end. We never receive card or payment details - Shopify bills you directly.
• Sign-in details for staff who open the app: name, email, locale and Shopify user id, plus the Shopify access token that lets the app call the Admin API on your store's behalf.
• Support emails you send us, and error logs from the app.

What the app can access on your store

The app asks Shopify for a narrow set of permissions: it reads products, files, publications and your theme, creates and updates option data and the add-on helper product, reads Shopify Files that customers upload, and registers the cart transform that merges add-on prices. It uses the theme permission only to check whether the app block has been added to a product template - it never edits your theme files.

The app does not request access to your orders or your customer records. We never see your customers' names, emails, addresses, phone numbers or payment details.

The content you create

Option sets, option fields, choice sets and choices, product and variant assignments, and app settings such as the add-on variant and its price. Assignments include the product and variant IDs and titles Shopify gives us so the app can show you what is assigned where.

Product-level storefront activity: when a product with options was viewed or added to a cart, the product title, the option sets involved, any add-on revenue and a timestamp. These records contain no customer identifiers: no names, emails, addresses, phone numbers, IP addresses or cookie ids.

What we handle from your customers

When a customer uploads a file on a FILE option, their browser sends it directly to your own Shopify Files library. The file never passes through our servers and we never store a copy of it. What we handle is the file name and the Shopify CDN link for it, stored as a line item property on the order inside Shopify. The customer's file name is prefixed with zesty-customer- so you can identify uploads in Content, then Files.

When a customer types into a text field or picks an option, the value is written to line item properties on the order inside Shopify. Those values are not copied into our database, and we do not keep them after the order is placed. A short-lived upload token is held at Cloudflare's edge while a file upload is in progress, and it expires within 30 minutes.

Files uploaded by customers who abandoned their cart stay in your Files library until you delete them.

For this data you are the controller and we are your processor. If one of your customers asks you to correct or delete it, you control it and you can delete it in Shopify; our Data Processing Addendum explains how we help.

Why we process it

Where the law requires a legal basis: performance of our contract with you for the app itself, our legitimate interests for security and aggregate statistics, and legal obligation for tax and accounting records.

We do not sell personal data, we do not use it for advertising or profiling, and we do not send marketing emails. The only emails we send are transactional: a data export you asked for, replies to your support requests, and notices about these policies.

• To provide the app: storing your option sets, rendering options on your storefront, merging add-on fees into a cart line, and showing order details back to you.
• To run billing: keeping your plan and entitlement state in sync with Shopify.
• To support you: answering your emails and diagnosing problems you report.
• To keep the service working and secure: aggregate storefront statistics, error logs.

Who else processes your data

We use a small set of infrastructure providers. Each one is bound by its own data processing terms, and we bind them to terms no less protective than our Data Processing Addendum. We will tell you before we add a sub-processor that handles your customers' personal data.

Where we store it and international transfers

Our database is hosted by Neon in Singapore (AWS ap-southeast-1). Cloudflare and Shopify serve traffic from a global network, so your data may be processed outside your country, including in the United States.

Where a transfer safeguard is required for data protected by the EU or UK GDPR, we rely on the European Commission's Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum; our Data Processing Addendum sets out how they apply.

How long we keep it

To have your data deleted earlier, email hello@ludicas.app from an address associated with the store, or uninstall and ask for deletion in the same message. We delete it and confirm by email.

Shopify also sends us mandatory privacy webhooks. We subscribe to the customer data request, customer redaction and shop redaction topics, and we act on them within 30 days. A shop redaction request deletes your stored data automatically, without you having to ask.

• Sign-in and access tokens: deleted as soon as you uninstall the app.
• Option sets, choice sets, assignments and settings: kept after uninstall so that reinstalling restores your setup. Shopify sends us a shop-data deletion request 48 hours after uninstall, and we delete this data within 30 days of that request. Cached copies at Cloudflare's edge expire within 30 days at the latest.
• Product-level storefront events: kept for aggregate statistics, deleted with the rest of your data.
• Technical and security logs: kept for up to 30 days.
• Database backups: removed on their normal cycle, within 30 days.
• Records we must keep for tax and accounting: kept as long as the law requires, then deleted.

Your rights

Depending on where you are, you may have the right to access the personal data we hold about you, to correct it, to delete it, to receive a portable copy, to object to or restrict certain processing, and to complain to your local data protection authority. We do not sell personal data and we do not use it for advertising.

Email hello@ludicas.app to exercise any of these rights. We answer within 30 days. If you are a store's customer and want your data changed or deleted in that store's orders, contact the store directly: they control that data, and we respond to their requests through Shopify's privacy webhooks.

If you are in Singapore, we also handle personal data in line with the Personal Data Protection Act 2012 (PDPA).

Cookies and analytics

This site uses Cloudflare Web Analytics, which reports aggregate page views without cookies, without fingerprinting and without tracking anyone across sites. We use it to know how the site was found and which pages are read.

• This website sets no tracking cookies and runs no advertising or profiling scripts.
• The app admin sets one small cookie that remembers your language so error messages and forms are translated. It contains no personal data.
• The storefront extension sets no cookies and writes nothing to your customers' browsers; it does not fingerprint visitors or follow them across sites.
• Storefront option data is cached at Cloudflare's edge under a key derived from your shop domain, not from any visitor.

Security

Traffic is served over TLS. Shopify access tokens are stored in our database and used only for the store they belong to. Database access is restricted to the app, which connects through Cloudflare Hyperdrive. Shopify webhook requests are verified by HMAC signature before we act on them. We keep the data we collect to the minimum the app needs to work.

If we become aware of a security incident affecting your data, we will tell you without undue delay.

Children

The app is a tool for businesses selling on Shopify. It is not directed at children, and we do not knowingly collect personal data from children.

Changes to this policy

If we make a material change we update the date at the top of this page and, for changes that affect how your data is used, tell you in the app or by email before the change takes effect. If you do not accept a change, you can uninstall the app.