DynamicText Privacy Policy

DynamicText ("the App") helps Shopify merchants replace and manage storefront text without editing theme code. This policy describes what information the App collects when you install it on your Shopify store, how it is used, and the choices you have.

1. Information we collect

When you install the App, we collect and store:

• Store information — your shop domain and an access token issued by Shopify, used solely to operate the App inside your store.
• Configuration data — the text replacement rules you create (target text, replacement text, page scope, language, and CSS selectors), plus theme and locale metadata read through the permissions you grant (read_themes, read_locales).
• Support requests — when you choose to submit the in-app form, we store your shop domain, contact email, category, description, and the diagnostics shown beside the form. Diagnostics include your plan, rule counts, App Embed status, app version, and collection error summaries.
• Billing status — your subscription plan, managed entirely through the Shopify Billing API. We never see or store payment details.

The support form requires you to confirm this collection before submission. We record the confirmation time and policy version with the ticket.

The App does not use storefront replacement to collect customer personal data. Shopify may include customer identifiers in mandatory privacy webhook payloads; DynamicText validates those requests without adding the identifiers, email addresses, or order IDs to its compliance audit records.

2. How we use information

• To provide, operate, and maintain the App's features.
• To apply your text replacement rules on your storefront.
• To contact you and investigate the specific support request you submit.
• To improve reliability using aggregated or de-identified support trends, not raw ticket content for unrelated purposes.
• To manage subscriptions through Shopify Billing.

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Data storage and security

Sessions are stored in Cloudflare Workers KV, support and compliance records are stored in Cloudflare D1, and replacement rules are stored in Shopify App Metafields. Data is encrypted in transit via HTTPS, and access is limited to operating and supporting the App.

Discord acts as a notification service for new support tickets. Discord receives the ticket number, category, and limited non-identifying diagnostics; the shop domain, contact email, and full message remain in D1.

4. Data retention and deletion

Raw support-ticket data is kept for no longer than 12 months from submission unless you request earlier deletion. After that period, we remove the shop domain, contact email, message, diagnostics, and notification errors. We may retain non-identifying metadata such as the ticket number, category, status, and dates to measure support reliability and recurring issue trends.

When you uninstall the App, Shopify revokes its access to your store. On receiving a shop/redact request, we remove session records and redact support tickets by removing the shop domain, contact email, message, and diagnostics. We retain only non-identifying ticket metadata such as the ticket number, category, and status for reliability reporting. Shopify removes App-owned metafields as part of the uninstall lifecycle.

Because DynamicText does not retain customer-specific data from Shopify privacy webhook payloads, customers/data_request and customers/redact requests are acknowledged with no customer data to return or remove.

5. Your rights

Depending on your location (including under GDPR and CCPA), you may have rights to access, correct, or delete data we hold about your store. Contact us at dynamictextdev@gmail.com and we will respond within 30 days.

6. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

7. Contact

Questions about this policy or your data: dynamictextdev@gmail.com