Privacy Policy

Effective Date: April 20, 2026 | Last Updated: April 20, 2026

1. Introduction

CoBuy (“we”, “our”, “us”) is a Shopify application that enables social buying and shared discount functionality for online stores. This Privacy Policy explains how we collect, use, store, and protect information when merchants install and use our app.

2. Information We Collect

From Merchants (Store Owners)

• Store information: shop domain, store name, email address
• Product data: product titles, prices, variants (only for CoBuy-enrolled products)
• Order data: order IDs, line items, pricing, shipping addresses, fulfillment status
• Settings and preferences: discount tier configurations, notification settings

From Customers (End Users)

• Name and email address (from order data when participating in CoBuy groups)
• Shipping address (to determine same-address discount eligibility)
• Order references (order number and line items for group membership tracking)

What We Do NOT Collect

• Payment card numbers or financial account details
• Social Security numbers or government IDs
• Passwords or authentication credentials for customers
• Browsing history or tracking cookies on customer devices

3. How We Use Information

We use collected data solely to:

• Create and manage buying groups, calculate tier-based discounts
• Apply earned discounts through Shopify’s order editing API
• Send notifications about group progress and discount milestones (with opt-out)
• Provide merchants with group performance dashboards

4. Data Sharing

We do not sell, rent, or trade personal data.

We may share data with:

• Shopify — as required to operate within the Shopify platform
• AWS (Amazon Web Services) — our cloud infrastructure provider
• Legal authorities — only if required by law

5. Data Storage and Security

• All data is stored in encrypted databases hosted on AWS
• All data transmission uses HTTPS/TLS encryption
• API tokens and credentials are encrypted at rest
• Access to production systems is restricted to authorized personnel only

6. Data Retention

• Active merchants: Data retained for the duration of app installation
• After uninstall: All store data permanently deleted within 48 hours
• Customer erasure: Personal information anonymized immediately upon request

7. GDPR Compliance

For merchants and customers in the European Economic Area:

• We process data based on legitimate interest in fulfilling orders
• We only collect data necessary for app functionality
• Customers can request access to or deletion of their data
• We respond automatically to Shopify’s GDPR compliance webhooks

8. CCPA Compliance

For California residents:

• We do not sell personal information
• Consumers may request disclosure or deletion of data collected
• We do not discriminate against consumers who exercise their rights

9. Cookies and Tracking

CoBuy does not place cookies on customer devices. We do not use third-party tracking pixels or analytics on customer-facing pages.

10. Children’s Privacy

CoBuy is a business-to-business tool. We do not knowingly collect data from children under 13. If we learn that we have, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app interface.

12. Contact Us

For privacy-related questions or data requests:
Email: support@cobuyapp.com
Company: Vyasa Technology Solutions