SalesJuice Privacy Policy
Last updated 21 October 2026
SalesJuice is a Shopify app. Stores use it to create discount promotions, show them on their storefront and apply them at checkout. This policy explains what information the app handles, why, where, for how long, and what choices you have.
It is written for two kinds of reader:
- Merchants: the stores that install SalesJuice (“you”).
- Shoppers: people who visit or buy from those stores.
This policy covers the SalesJuice app. Our website, www.salesjuice.app, and its early-access mailing list have their own notice on that site.
1. Who we are
SalesJuice is provided by AIOOM SOLUTIONS LLC, 228 Park Ave S, #897446, New York, NY 10003, United States (“SalesJuice”, “we”, “us”). You can reach us at support@salesjuice.app.
Our role.
- Shoppers’ personal information: the merchant decides why and how it is used. We process it for the merchant, only to provide the app. Under the GDPR and UK GDPR we are the merchant’s processor. Under US state privacy laws such as the CCPA we are the merchant’s service provider. If you are a shopper, the store’s own privacy policy is the main one for you, and the store is where to send requests (see §10).
- Information about merchants as our customers: your store’s details and how your store uses the app. For this information we are the controller.
2. In short
- We use store and shopper information only to run the app for the store that installed it.
- We do not sell personal information. We do not share it for advertising. We do not use it to train AI models.
- We never receive payment card details. Shopify handles billing for the app.
- The app’s storefront code sets no cookies. Its analytics pixel runs only for shoppers whose privacy choices allow analytics.
- Two days after a store uninstalls the app, we erase what we hold for that store.
3. Information we receive from Shopify
3.1 About your store
When you install SalesJuice, Shopify gives the app access to your store. We receive and keep:
- Store details: name, myshopify.com and custom domains, store email addresses, phone number, address, the owner’s name, currency, time zone, language, Shopify plan and the other store settings Shopify includes.
- Your catalogue: products, variants, collections and product images. For Analytics we also read each variant’s unit cost, which goes into each order’s profit figures, and whether its stock is tracked.
- Customer segments (their names and queries), discounts and discount codes.
- Your app subscription: the plan you chose. Shopify handles the payment.
- A session record when you or your staff open the app in the Shopify admin. It links a Shopify session to your store. It does not hold the staff member’s name or email.
How we use it. We use this information to run the app. It lets us:
- build promotions on your products, collections and segments;
- start and end them in your time zone and show amounts in your currency;
- check your plan’s limits;
- calculate the profit figures in Analytics.
We use the store email address to send you a customer data file you asked for (§10.1), and to write to you about your account or a change to this policy. We do not use it for marketing.
3.2 About your customers
To decide who qualifies for a promotion, and to count how often a promotion has been used, the app handles:
| Information | Why the app needs it |
|---|---|
| Name and email address | So you can find and choose a customer for a “specific customers” condition. |
| Customer tags | For promotions limited to customers with a tag. |
| Customer segment membership (Shopify tells the app when a customer joins or leaves a segment) | For promotions limited to a segment. |
| Orders: order number, dates, status, totals, taxes, discounts and discount codes, the items bought (product, variant, quantity, price, discount), shipping method and price, the payment method’s name, the cart’s token and attributes, and which customer the order belongs to | To count uses of each promotion, including limits per customer. To support conditions based on how many orders a customer has placed, how much they have spent, or when they last ordered. To produce your analytics. |
Shopify’s customer and order records can also contain a shopper’s phone number, postal addresses, IP address and browser details. The app does not keep these.
3.3 The eligibility profile
From this information the app builds an eligibility profile for each customer. It contains:
- the customer’s Shopify id, segment ids and tags;
- their completed orders for the last 400 days: id, date and total. Older orders are kept only as a count, a total and the date of the most recent one;
- how many times they have used each promotion.
The profile is saved in your own Shopify store, as a customer metafield (salesjuice.customer_profile). The
app also keeps a copy in its database. Some customers may still carry an older salesjuice.customer_tags
metafield from an earlier version of the app; the app no longer writes it.
- At checkout, Shopify’s discount functions read the profile to decide whether a customer-specific discount applies. This runs inside Shopify. Nothing is sent to us at checkout.
- On the storefront, when a customer is signed in, the page reads that customer’s own profile to show the offers they qualify for. The information goes only into that customer’s own page. Of their tags, only the ones your live promotions use appear there. Of their orders, only each order’s date and total appear, and only when one of your live promotions looks at past orders. Because the storefront can read the profile, a signed-in customer can also read their own full profile, tags included, through Shopify. Other shoppers cannot.
3.4 Promotion settings saved in your store
The app saves your promotions, as checkout and the storefront need them, in metafields on your store, your products, variants and collections. These hold no personal information, with one exception. A promotion limited to customers you name keeps those customers’ Shopify IDs in the settings checkout reads, because Shopify’s discount functions decide at checkout whether a customer is on the list. The settings your storefront prints carry only a code for the list, never who is on it, and a page learns only whether the signed-in shopper is on it. When Shopify asks us to erase a customer, the app removes them from every such list (§9.3).
A discount code limited to particular customers is never published in them. The app gives it only to a signed-in customer who qualifies, through a request Shopify signs.
4. Information you give us
- Your promotions: names, rewards, conditions, schedules, limits, campaigns, and the history of changes to them.
- Your measurement choice (§7) and the date you made it, and two optional cost figures used in Analytics: shipping cost per order and return handling cost.
- Support messages you send to support@salesjuice.app, and anything you include in them. We never need a shopper’s personal information to help you, and we ask you not to send it.
5. Information the app records about how your store uses it
The app records a few dates about your store:
- when the app was installed, uninstalled, and erased (§9.2);
- when your first promotion was created and when one first went live;
- the first day and the most recent day a shopper was shown one of your offers;
- the date of your first discounted order;
- when you first chose a paid plan;
- when you dismissed the welcome message on the app’s Home page.
We use these dates to understand how stores get started with SalesJuice, to improve the app, and to choose a good moment to ask you for a review through Shopify. They contain no shopper information.
The app also measures how fast its own pages are for you: how long each page took to appear and to respond (Shopify’s Web Vitals, which Shopify’s admin reports to the app), how long each move between pages took, and how long each page waited for its data, and how long the app’s server took to answer the page. Each measurement records your store, the page, the figure, the app’s version, a random number that groups the measurements of one page load, and — for the largest paint and the largest movement on the page — which part of the page it was, named by the app’s own code (for example “a table cell”), never by anything written on the page. It records nothing about you as a person, your shoppers or your location: Shopify’s report includes a country, and the app drops it before sending. We use these figures to find and fix slow pages. They are kept for 30 days (§9.1).
6. What the app does on your storefront
6.1 The offers display
The app’s theme blocks read your published promotion settings and show your offers. They set no cookies. They keep a few small values in the browser’s storage, listed in §6.3.
So that shoppers know how to qualify, an offer shows what it asks of them: the customer tag or segment it names, and any spend or order amount. When you limit a promotion to customers you name, who they are is never shown.
6.2 The analytics pixel
SalesJuice installs a Shopify web pixel on your store. Shopify runs it only for shoppers whose privacy choices on your store allow analytics. It is declared to Shopify as analytics only: no marketing, no personalisation, no sale of data.
It sends us two kinds of message:
- “An offer was shown.” At most once per browser per day, when the storefront showed one of your offers. It carries your store’s domain, a per-store token and the event name. We record only the first and the most recent day for your store (§5).
- Measurement events, only while the measurement in §7 runs: session started, page viewed, cart viewed, checkout started and checkout completed. Each carries the shopper’s group and a cart or order value. A cart view may also say which of your promotions the cart was close to, as a promotion id and a distance band. We store daily totals per group and per promotion. We store nothing per shopper.
The pixel never sends a customer id, name, email, order id, list of items, page address, session identifier or Shopify’s visitor id.
Why Shopify’s install screen lists more. Shopify’s pixel system makes device and activity data available to every app pixel: the browser, the pages viewed, an approximate location and Shopify’s visitor id cookie. So Shopify lists them when you install the app. SalesJuice’s pixel does not send them to us. Like any web request, each message reaches our servers with the browser’s IP address and browser type. The app does not store them.
6.3 Browser storage and cart attributes
| Name | Kind | Set when | Holds | Removed |
|---|---|---|---|---|
sj:offer-hub:bar-dismissed:v1 |
Session storage | The shopper closes the offers bar | A flag | When the tab closes |
sj-hub-autoopen, sj-hub-toast:… |
Session storage | The offers panel opens, or shows a notice | A flag | When the tab closes |
sj_revealed_codes |
Session storage | A signed-in customer who qualifies is shown a members-only code | The code | When the tab closes |
sj:offer-hub:editor-panel:v1 |
Session storage | Only inside Shopify’s theme editor | The panel’s open or closed state | When the tab closes |
sj_arm, sj_arm_swept |
Session storage | The measurement runs and the shopper allows analytics | The shopper’s group; a flag | When the tab closes |
_sj_s, _sj_r, _sj_a |
Session storage (pixel) | The measurement runs and the shopper allows analytics | “Session counted”; promotions already reported; the group | When the tab closes |
sj_preview, _sj_p |
Session storage | A merchant opens the app’s preview link | A flag | When the tab closes |
_sj_o |
Local storage (pixel) | An offer was shown and the shopper allows analytics | The date of the last “offer shown” message | Replaced each day; stays until browser data is cleared |
sj_measure_off |
Local storage | Someone opens the store with ?sj_measure=off, meant for the merchant’s own browser |
A flag that stops this browser being counted | When the store is opened with ?sj_measure=on, or browser data is cleared |
_sj_arm, _sj_arm_first, _sj_arm_key |
Cart attributes | The measurement runs and the shopper allows analytics | The group (“control” or “exposed”), the first group seen, a version stamp | They travel with the cart to the order, where you can see them. Removed from the cart if the shopper withdraws consent. |
_sj_preview |
Cart attribute | A merchant opens the app’s preview link | A flag that leaves the cart out of measurement | Travels with the cart to the order |
7. Measurement (optional, off unless you switch it on)
You can ask SalesJuice to measure what its storefront display adds to your sales. While the measurement runs:
- One shopper in five who allows analytics is not shown the app’s offers and badges. Those shoppers still receive every discount they qualify for at checkout. Nobody pays more.
- Each shopper who allows analytics is placed in one of two groups. A signed-in customer’s group comes from their customer id; a guest’s comes from their cart. Our server works the group out from a request Shopify signs, and stores nothing to do it. The group is saved on the cart (§6.3).
- Shoppers who have not allowed analytics are not placed in a group. They see your store as usual and are not counted.
You can stop the measurement at any time in the app. We suggest your own privacy policy mentions that you use an app to measure the effect of your promotions.
8. How we use information, and what we never do
We use the information above only to:
- provide the app: decide who qualifies, apply discounts through Shopify, show offers, enforce usage limits and produce your analytics;
- support you when you write to us;
- keep the app secure and working: our logs record ids and counts so we can find and fix failures;
- meet legal duties and Shopify’s requirements;
- improve the app, using the dates in §5 and aggregated counts. We never use shopper information for this.
We never:
- sell personal information, or share it for cross-context behavioural advertising;
- build profiles of shoppers for any purpose other than your own promotions;
- combine one store’s data with another’s: each store’s data is kept separate;
- use your data or your customers’ data to train AI models.
Automated decisions. A promotion is the merchant’s own pricing choice. The app applies the conditions the merchant set, such as a tag, a segment or a past order count, to decide whether a discount applies. A discount is an extra benefit and never raises a price, so this has no legal or similarly significant effect on a shopper.
9. How long we keep information
9.1 Retention periods
| Information | How long |
|---|---|
| Your promotions, settings and measurement choice; the store, catalogue, customer and order information from Shopify; analytics totals | While the app is installed. Erased after uninstall (§9.2). |
| Order detail inside a customer’s eligibility profile | 400 days. Older orders are kept only as a count, a total and the date of the most recent one. |
| Changes waiting to be applied to a profile or a usage count | Until applied, usually within minutes. |
| A note that an order was deleted, so a late update cannot bring it back | 30 days. |
| Speed measurements of the app’s own pages (§5) | 30 days. |
| Records of privacy requests from Shopify | The shopper’s email and phone are removed as soon as the request is handled. The rest is kept as described in §9.2. |
| Log lines the app writes: ids and counts, never names, emails or addresses | 14 days, on our hosting provider. |
| Our hosting provider’s own record of each notification Shopify sends the app, which can include a customer’s name and email | 14 days. |
| Database backups | 7 days. |
| Logs of our automated failure alert at GitHub: ids and counts only | 90 days. |
| A customer data file prepared for an access request | Deleted once delivered to the merchant, and never kept past the 30-day deadline. |
| Support emails | Up to 24 months after the last message in the conversation. |
9.2 When you uninstall
When you uninstall, Shopify immediately removes the app’s access to your store. Two days later, Shopify asks us to erase your store’s data, and we erase:
- your promotions, campaigns, settings and their change history;
- the copies of your catalogue, customers and orders;
- your analytics totals;
- the speed measurements of the app’s pages;
- every pending change and session.
Each day the app also lists stores uninstalled more than two days earlier whose erasure has not run, and we erase those by hand. This covers the rare case where Shopify’s request is lost. Logs and backups then expire on the schedule in §9.1, well within Shopify’s 30-day limit.
What remains after the erasure:
- A short record of your store: its name, its domains and the dates in §5. Its contact details are cleared.
- The records of privacy requests: the request type, its dates, and the Shopify ids of the store, customer and orders it named, with no email or phone.
We keep these as evidence that we handled your store’s data and its privacy requests as required.
Customer profiles and settings in your own Shopify store. The app writes each customer’s eligibility profile (§3.3) and its promotion settings (§3.4) into your store, as metafields. When you uninstall, Shopify removes the app’s access to your store at once, and its request to erase your store’s data arrives only two days later. So there is no moment at which the app can still reach those metafields to delete them: they stay in your store, as your data, under your control. If you want them removed, write to us before you uninstall, while the app can still reach them, and we will remove them. If you reinstall, the app rewrites its promotion settings to match what it then holds.
9.3 When a merchant asks Shopify to erase a customer
When Shopify asks us to erase a customer, the app:
- deletes that customer’s eligibility profile from your store and from our database;
- deletes their pending changes;
- removes them from every promotion limited to customers you named, including the settings checkout reads;
- clears their name, email and tags from our copy of the customer;
- removes the notes on their orders that identify them, and their tags from your analytics notes.
Your sales totals do not change. If the request arrives after you have uninstalled, we erase what we hold, but we can no longer reach the profile saved in your store.
10. Your rights and how to make a request
10.1 If you are a shopper
Send your request to the store you bought from. The store passes it to us through Shopify, and we act on it:
- Access. We prepare a file of what the app holds about you: your eligibility profile, any pending changes and the notes the app keeps on your orders. We send it to the store within 30 days, by encrypted attachment or an expiring link. The store gives you the rest, such as your name, email and orders, from Shopify.
- Deletion. We erase your information as described in §9.3. Shopify sends us the request 10 days after the store submits it. If you ordered in the last six months, Shopify sends it once six months have passed since that order.
- Correction. The app copies your details from Shopify. When the store corrects them in Shopify, the app follows.
10.2 If you are a merchant
Depending on where you are, you can ask us to access, correct, delete or export the information we hold about you as our customer, or to restrict or object to how we use it. Write to support@salesjuice.app. We reply within 30 days, and we may first check that you are authorised to act for the store.
You can also complain to your local data protection authority.
10.3 US state privacy rights
We do not sell or share personal information as US state laws define those terms. We do not treat anyone differently for exercising a privacy right.
11. Who we share information with
We use these providers to run the app. Each may process information only to provide its service to us.
| Provider | What it does for us |
|---|---|
| Shopify Inc. | The platform the app runs on. It holds your store, the metafields in §3.3 and §3.4, and runs checkout, the discount functions and the pixel. |
| Gadget Software Inc. (Canada) | Hosts the app’s servers, database, background jobs and logs on Google Cloud in the United States, under Gadget’s data processing agreement. Gadget’s own providers are listed at gadget.dev/privacy. |
| GitHub, Inc. (United States) | Runs our automated failure alert. It reads the app’s recent log lines and keeps only the failure lines, which carry ids and counts. |
| Microsoft Corporation (Microsoft 365) | Our email, including support@salesjuice.app. |
The app uses no analytics, advertising or tracking providers.
We may also disclose information when the law requires it. If SalesJuice is sold or merged, the information may pass to the new owner, under this policy, and we will tell you first.
12. Where information is processed
AIOOM SOLUTIONS LLC is established in the United States, not in Europe. The app’s data is stored and processed in the United States, on Google Cloud through Gadget. Gadget, a Canadian company, may access it to support its service. Information saved in your Shopify store stays with Shopify.
When personal information comes from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, with the UK and Swiss additions. These are part of our data processing agreement with merchants and of Gadget’s agreement with us.
13. Security
- Every connection to the app uses HTTPS.
- Each store’s data is kept separate, and the app refuses requests that cross from one store to another.
- Requests from Shopify are checked for a valid Shopify signature before the app acts on them. Pixel messages must carry the store’s own token.
- The app asks Shopify for the fewest permissions it needs. Of shoppers’ contact details, it requests only name and email.
- The app’s own log lines never contain names, emails or addresses. An automated check enforces this on every change.
- Only our founder has access to the app’s production database.
- If we learn of a breach affecting merchant data, we tell Shopify within 24 hours and the affected merchants without undue delay.
14. Children
SalesJuice is a tool for businesses and is not directed at children. We do not knowingly collect information from children. What a store collects from its own shoppers is governed by that store’s policy.
15. Changes to this policy
When we change this policy, we post the new version on this page and update the date at the top. If a change materially affects how we handle your data, we also email your store’s contact address before it takes effect.
16. Contact
AIOOM SOLUTIONS LLC
228 Park Ave S, #897446
New York, NY 10003
United States
Email: support@salesjuice.app