Skip to content
SalesJuiceGet early access

SalesJuice Privacy Policy

Last updated 21 October 2026

Contents

  1. 1Who we are
  2. 2In short
  3. 3Information we receive from Shopify
  4. 4Information you give us
  5. 5Information the app records about how your store uses it
  6. 6What the app does on your storefront
  7. 7Measurement (optional, off unless you switch it on)
  8. 8How we use information, and what we never do
  9. 9How long we keep information
  10. 10Your rights and how to make a request
  11. 11Who we share information with
  12. 12Where information is processed
  13. 13Security
  14. 14Children
  15. 15Changes to this policy
  16. 16Contact

SalesJuice is a Shopify app. Stores use it to create discount promotions, show them on their storefront and apply them at checkout. This policy explains what information the app handles, why, where, for how long, and what choices you have.

It is written for two kinds of reader:

  • Merchants: the stores that install SalesJuice (“you”).
  • Shoppers: people who visit or buy from those stores.

This policy covers the SalesJuice app. Our website, www.salesjuice.app, and its early-access mailing list have their own notice on that site.

1. Who we are

SalesJuice is provided by AIOOM SOLUTIONS LLC, 228 Park Ave S, #897446, New York, NY 10003, United States (“SalesJuice”, “we”, “us”). You can reach us at support@salesjuice.app.

Our role.

  • Shoppers’ personal information: the merchant decides why and how it is used. We process it for the merchant, only to provide the app. Under the GDPR and UK GDPR we are the merchant’s processor. Under US state privacy laws such as the CCPA we are the merchant’s service provider. If you are a shopper, the store’s own privacy policy is the main one for you, and the store is where to send requests (see §10).
  • Information about merchants as our customers: your store’s details and how your store uses the app. For this information we are the controller.

2. In short

  • We use store and shopper information only to run the app for the store that installed it.
  • We do not sell personal information. We do not share it for advertising. We do not use it to train AI models.
  • We never receive payment card details. Shopify handles billing for the app.
  • The app’s storefront code sets no cookies. Its analytics pixel runs only for shoppers whose privacy choices allow analytics.
  • Two days after a store uninstalls the app, we erase what we hold for that store.

3. Information we receive from Shopify

3.1 About your store

When you install SalesJuice, Shopify gives the app access to your store. We receive and keep:

  • Store details: name, myshopify.com and custom domains, store email addresses, phone number, address, the owner’s name, currency, time zone, language, Shopify plan and the other store settings Shopify includes.
  • Your catalogue: products, variants, collections and product images. For Analytics we also read each variant’s unit cost, which goes into each order’s profit figures, and whether its stock is tracked.
  • Customer segments (their names and queries), discounts and discount codes.
  • Your app subscription: the plan you chose. Shopify handles the payment.
  • A session record when you or your staff open the app in the Shopify admin. It links a Shopify session to your store. It does not hold the staff member’s name or email.

How we use it. We use this information to run the app. It lets us:

  • build promotions on your products, collections and segments;
  • start and end them in your time zone and show amounts in your currency;
  • check your plan’s limits;
  • calculate the profit figures in Analytics.

We use the store email address to send you a customer data file you asked for (§10.1), and to write to you about your account or a change to this policy. We do not use it for marketing.

3.2 About your customers

To decide who qualifies for a promotion, and to count how often a promotion has been used, the app handles:

Information Why the app needs it
Name and email address So you can find and choose a customer for a “specific customers” condition.
Customer tags For promotions limited to customers with a tag.
Customer segment membership (Shopify tells the app when a customer joins or leaves a segment) For promotions limited to a segment.
Orders: order number, dates, status, totals, taxes, discounts and discount codes, the items bought (product, variant, quantity, price, discount), shipping method and price, the payment method’s name, the cart’s token and attributes, and which customer the order belongs to To count uses of each promotion, including limits per customer. To support conditions based on how many orders a customer has placed, how much they have spent, or when they last ordered. To produce your analytics.

Shopify’s customer and order records can also contain a shopper’s phone number, postal addresses, IP address and browser details. The app does not keep these.

3.3 The eligibility profile

From this information the app builds an eligibility profile for each customer. It contains:

  • the customer’s Shopify id, segment ids and tags;
  • their completed orders for the last 400 days: id, date and total. Older orders are kept only as a count, a total and the date of the most recent one;
  • how many times they have used each promotion.

The profile is saved in your own Shopify store, as a customer metafield (salesjuice.customer_profile). The app also keeps a copy in its database. Some customers may still carry an older salesjuice.customer_tags metafield from an earlier version of the app; the app no longer writes it.

  • At checkout, Shopify’s discount functions read the profile to decide whether a customer-specific discount applies. This runs inside Shopify. Nothing is sent to us at checkout.
  • On the storefront, when a customer is signed in, the page reads that customer’s own profile to show the offers they qualify for. The information goes only into that customer’s own page. Of their tags, only the ones your live promotions use appear there. Of their orders, only each order’s date and total appear, and only when one of your live promotions looks at past orders. Because the storefront can read the profile, a signed-in customer can also read their own full profile, tags included, through Shopify. Other shoppers cannot.

3.4 Promotion settings saved in your store

The app saves your promotions, as checkout and the storefront need them, in metafields on your store, your products, variants and collections. These hold no personal information, with one exception. A promotion limited to customers you name keeps those customers’ Shopify IDs in the settings checkout reads, because Shopify’s discount functions decide at checkout whether a customer is on the list. The settings your storefront prints carry only a code for the list, never who is on it, and a page learns only whether the signed-in shopper is on it. When Shopify asks us to erase a customer, the app removes them from every such list (§9.3).

A discount code limited to particular customers is never published in them. The app gives it only to a signed-in customer who qualifies, through a request Shopify signs.

4. Information you give us

  • Your promotions: names, rewards, conditions, schedules, limits, campaigns, and the history of changes to them.
  • Your measurement choice (§7) and the date you made it, and two optional cost figures used in Analytics: shipping cost per order and return handling cost.
  • Support messages you send to support@salesjuice.app, and anything you include in them. We never need a shopper’s personal information to help you, and we ask you not to send it.

5. Information the app records about how your store uses it

The app records a few dates about your store:

  • when the app was installed, uninstalled, and erased (§9.2);
  • when your first promotion was created and when one first went live;
  • the first day and the most recent day a shopper was shown one of your offers;
  • the date of your first discounted order;
  • when you first chose a paid plan;
  • when you dismissed the welcome message on the app’s Home page.

We use these dates to understand how stores get started with SalesJuice, to improve the app, and to choose a good moment to ask you for a review through Shopify. They contain no shopper information.

The app also measures how fast its own pages are for you: how long each page took to appear and to respond (Shopify’s Web Vitals, which Shopify’s admin reports to the app), how long each move between pages took, and how long each page waited for its data, and how long the app’s server took to answer the page. Each measurement records your store, the page, the figure, the app’s version, a random number that groups the measurements of one page load, and — for the largest paint and the largest movement on the page — which part of the page it was, named by the app’s own code (for example “a table cell”), never by anything written on the page. It records nothing about you as a person, your shoppers or your location: Shopify’s report includes a country, and the app drops it before sending. We use these figures to find and fix slow pages. They are kept for 30 days (§9.1).

6. What the app does on your storefront

6.1 The offers display

The app’s theme blocks read your published promotion settings and show your offers. They set no cookies. They keep a few small values in the browser’s storage, listed in §6.3.

So that shoppers know how to qualify, an offer shows what it asks of them: the customer tag or segment it names, and any spend or order amount. When you limit a promotion to customers you name, who they are is never shown.

6.2 The analytics pixel

SalesJuice installs a Shopify web pixel on your store. Shopify runs it only for shoppers whose privacy choices on your store allow analytics. It is declared to Shopify as analytics only: no marketing, no personalisation, no sale of data.

It sends us two kinds of message:

  1. “An offer was shown.” At most once per browser per day, when the storefront showed one of your offers. It carries your store’s domain, a per-store token and the event name. We record only the first and the most recent day for your store (§5).
  2. Measurement events, only while the measurement in §7 runs: session started, page viewed, cart viewed, checkout started and checkout completed. Each carries the shopper’s group and a cart or order value. A cart view may also say which of your promotions the cart was close to, as a promotion id and a distance band. We store daily totals per group and per promotion. We store nothing per shopper.

The pixel never sends a customer id, name, email, order id, list of items, page address, session identifier or Shopify’s visitor id.

Why Shopify’s install screen lists more. Shopify’s pixel system makes device and activity data available to every app pixel: the browser, the pages viewed, an approximate location and Shopify’s visitor id cookie. So Shopify lists them when you install the app. SalesJuice’s pixel does not send them to us. Like any web request, each message reaches our servers with the browser’s IP address and browser type. The app does not store them.

6.3 Browser storage and cart attributes

Name Kind Set when Holds Removed
sj:offer-hub:bar-dismissed:v1 Session storage The shopper closes the offers bar A flag When the tab closes
sj-hub-autoopen, sj-hub-toast:… Session storage The offers panel opens, or shows a notice A flag When the tab closes
sj_revealed_codes Session storage A signed-in customer who qualifies is shown a members-only code The code When the tab closes
sj:offer-hub:editor-panel:v1 Session storage Only inside Shopify’s theme editor The panel’s open or closed state When the tab closes
sj_arm, sj_arm_swept Session storage The measurement runs and the shopper allows analytics The shopper’s group; a flag When the tab closes
_sj_s, _sj_r, _sj_a Session storage (pixel) The measurement runs and the shopper allows analytics “Session counted”; promotions already reported; the group When the tab closes
sj_preview, _sj_p Session storage A merchant opens the app’s preview link A flag When the tab closes
_sj_o Local storage (pixel) An offer was shown and the shopper allows analytics The date of the last “offer shown” message Replaced each day; stays until browser data is cleared
sj_measure_off Local storage Someone opens the store with ?sj_measure=off, meant for the merchant’s own browser A flag that stops this browser being counted When the store is opened with ?sj_measure=on, or browser data is cleared
_sj_arm, _sj_arm_first, _sj_arm_key Cart attributes The measurement runs and the shopper allows analytics The group (“control” or “exposed”), the first group seen, a version stamp They travel with the cart to the order, where you can see them. Removed from the cart if the shopper withdraws consent.
_sj_preview Cart attribute A merchant opens the app’s preview link A flag that leaves the cart out of measurement Travels with the cart to the order

7. Measurement (optional, off unless you switch it on)

You can ask SalesJuice to measure what its storefront display adds to your sales. While the measurement runs:

  • One shopper in five who allows analytics is not shown the app’s offers and badges. Those shoppers still receive every discount they qualify for at checkout. Nobody pays more.
  • Each shopper who allows analytics is placed in one of two groups. A signed-in customer’s group comes from their customer id; a guest’s comes from their cart. Our server works the group out from a request Shopify signs, and stores nothing to do it. The group is saved on the cart (§6.3).
  • Shoppers who have not allowed analytics are not placed in a group. They see your store as usual and are not counted.

You can stop the measurement at any time in the app. We suggest your own privacy policy mentions that you use an app to measure the effect of your promotions.

8. How we use information, and what we never do

We use the information above only to:

  • provide the app: decide who qualifies, apply discounts through Shopify, show offers, enforce usage limits and produce your analytics;
  • support you when you write to us;
  • keep the app secure and working: our logs record ids and counts so we can find and fix failures;
  • meet legal duties and Shopify’s requirements;
  • improve the app, using the dates in §5 and aggregated counts. We never use shopper information for this.

We never:

  • sell personal information, or share it for cross-context behavioural advertising;
  • build profiles of shoppers for any purpose other than your own promotions;
  • combine one store’s data with another’s: each store’s data is kept separate;
  • use your data or your customers’ data to train AI models.

Automated decisions. A promotion is the merchant’s own pricing choice. The app applies the conditions the merchant set, such as a tag, a segment or a past order count, to decide whether a discount applies. A discount is an extra benefit and never raises a price, so this has no legal or similarly significant effect on a shopper.

9. How long we keep information

9.1 Retention periods

Information How long
Your promotions, settings and measurement choice; the store, catalogue, customer and order information from Shopify; analytics totals While the app is installed. Erased after uninstall (§9.2).
Order detail inside a customer’s eligibility profile 400 days. Older orders are kept only as a count, a total and the date of the most recent one.
Changes waiting to be applied to a profile or a usage count Until applied, usually within minutes.
A note that an order was deleted, so a late update cannot bring it back 30 days.
Speed measurements of the app’s own pages (§5) 30 days.
Records of privacy requests from Shopify The shopper’s email and phone are removed as soon as the request is handled. The rest is kept as described in §9.2.
Log lines the app writes: ids and counts, never names, emails or addresses 14 days, on our hosting provider.
Our hosting provider’s own record of each notification Shopify sends the app, which can include a customer’s name and email 14 days.
Database backups 7 days.
Logs of our automated failure alert at GitHub: ids and counts only 90 days.
A customer data file prepared for an access request Deleted once delivered to the merchant, and never kept past the 30-day deadline.
Support emails Up to 24 months after the last message in the conversation.

9.2 When you uninstall

When you uninstall, Shopify immediately removes the app’s access to your store. Two days later, Shopify asks us to erase your store’s data, and we erase:

  • your promotions, campaigns, settings and their change history;
  • the copies of your catalogue, customers and orders;
  • your analytics totals;
  • the speed measurements of the app’s pages;
  • every pending change and session.

Each day the app also lists stores uninstalled more than two days earlier whose erasure has not run, and we erase those by hand. This covers the rare case where Shopify’s request is lost. Logs and backups then expire on the schedule in §9.1, well within Shopify’s 30-day limit.

What remains after the erasure:

  • A short record of your store: its name, its domains and the dates in §5. Its contact details are cleared.
  • The records of privacy requests: the request type, its dates, and the Shopify ids of the store, customer and orders it named, with no email or phone.

We keep these as evidence that we handled your store’s data and its privacy requests as required.

Customer profiles and settings in your own Shopify store. The app writes each customer’s eligibility profile (§3.3) and its promotion settings (§3.4) into your store, as metafields. When you uninstall, Shopify removes the app’s access to your store at once, and its request to erase your store’s data arrives only two days later. So there is no moment at which the app can still reach those metafields to delete them: they stay in your store, as your data, under your control. If you want them removed, write to us before you uninstall, while the app can still reach them, and we will remove them. If you reinstall, the app rewrites its promotion settings to match what it then holds.

9.3 When a merchant asks Shopify to erase a customer

When Shopify asks us to erase a customer, the app:

  • deletes that customer’s eligibility profile from your store and from our database;
  • deletes their pending changes;
  • removes them from every promotion limited to customers you named, including the settings checkout reads;
  • clears their name, email and tags from our copy of the customer;
  • removes the notes on their orders that identify them, and their tags from your analytics notes.

Your sales totals do not change. If the request arrives after you have uninstalled, we erase what we hold, but we can no longer reach the profile saved in your store.

10. Your rights and how to make a request

10.1 If you are a shopper

Send your request to the store you bought from. The store passes it to us through Shopify, and we act on it:

  • Access. We prepare a file of what the app holds about you: your eligibility profile, any pending changes and the notes the app keeps on your orders. We send it to the store within 30 days, by encrypted attachment or an expiring link. The store gives you the rest, such as your name, email and orders, from Shopify.
  • Deletion. We erase your information as described in §9.3. Shopify sends us the request 10 days after the store submits it. If you ordered in the last six months, Shopify sends it once six months have passed since that order.
  • Correction. The app copies your details from Shopify. When the store corrects them in Shopify, the app follows.

10.2 If you are a merchant

Depending on where you are, you can ask us to access, correct, delete or export the information we hold about you as our customer, or to restrict or object to how we use it. Write to support@salesjuice.app. We reply within 30 days, and we may first check that you are authorised to act for the store.

You can also complain to your local data protection authority.

10.3 US state privacy rights

We do not sell or share personal information as US state laws define those terms. We do not treat anyone differently for exercising a privacy right.

11. Who we share information with

We use these providers to run the app. Each may process information only to provide its service to us.

Provider What it does for us
Shopify Inc. The platform the app runs on. It holds your store, the metafields in §3.3 and §3.4, and runs checkout, the discount functions and the pixel.
Gadget Software Inc. (Canada) Hosts the app’s servers, database, background jobs and logs on Google Cloud in the United States, under Gadget’s data processing agreement. Gadget’s own providers are listed at gadget.dev/privacy.
GitHub, Inc. (United States) Runs our automated failure alert. It reads the app’s recent log lines and keeps only the failure lines, which carry ids and counts.
Microsoft Corporation (Microsoft 365) Our email, including support@salesjuice.app.

The app uses no analytics, advertising or tracking providers.

We may also disclose information when the law requires it. If SalesJuice is sold or merged, the information may pass to the new owner, under this policy, and we will tell you first.

12. Where information is processed

AIOOM SOLUTIONS LLC is established in the United States, not in Europe. The app’s data is stored and processed in the United States, on Google Cloud through Gadget. Gadget, a Canadian company, may access it to support its service. Information saved in your Shopify store stays with Shopify.

When personal information comes from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, with the UK and Swiss additions. These are part of our data processing agreement with merchants and of Gadget’s agreement with us.

13. Security

  • Every connection to the app uses HTTPS.
  • Each store’s data is kept separate, and the app refuses requests that cross from one store to another.
  • Requests from Shopify are checked for a valid Shopify signature before the app acts on them. Pixel messages must carry the store’s own token.
  • The app asks Shopify for the fewest permissions it needs. Of shoppers’ contact details, it requests only name and email.
  • The app’s own log lines never contain names, emails or addresses. An automated check enforces this on every change.
  • Only our founder has access to the app’s production database.
  • If we learn of a breach affecting merchant data, we tell Shopify within 24 hours and the affected merchants without undue delay.

14. Children

SalesJuice is a tool for businesses and is not directed at children. We do not knowingly collect information from children. What a store collects from its own shoppers is governed by that store’s policy.

15. Changes to this policy

When we change this policy, we post the new version on this page and update the date at the top. If a change materially affects how we handle your data, we also email your store’s contact address before it takes effect.

16. Contact

AIOOM SOLUTIONS LLC
228 Park Ave S, #897446
New York, NY 10003
United States

Email: support@salesjuice.app

SalesJuice

SalesJuice is an independent app for Shopify stores. Shopify is a trademark of Shopify Inc.

  • Terms of service
  • App privacy policy
  • Data processing agreement
  • Website privacy policy
  • support@salesjuice.app

© 2026 AIOOM SOLUTIONS LLC