Privacy Policy for OfferForge
Last updated: October 12, 2026
OfferForge ("the App", "we", "us") is a Shopify app that lets a store owner ("you", "the merchant") create and manage discount campaigns on their own Shopify store. This page explains what data the App collects, why, and what you can do about it.
1. The short version
By default, the App never collects, stores, or has access to any personal data about your customers — it only reads and writes product, collection, and discount data on your own store, and stores the discount campaigns and support questions you create yourself. If you choose to turn on the optional Loyalty Points or Customer Affiliate features, the App then also stores a limited set of data about the customers who use those specific features — their email address, and activity like a points balance or referral clicks — explained in full below. The App never reads your customers' names, addresses, phone numbers, or payment details, regardless of which features you turn on.
2. What we collect, and why
a) Information needed to run the App
When you install OfferForge, Shopify issues the App an access token for your store so it can function while installed. We store this token, together with your store's domain, for as long as the App stays installed. This is standard for every Shopify app and is required for the App to work at all.
b) The permissions ("scopes") the App requests
OfferForge asks Shopify for the following permissions, and no others:
- write_products — to read your product catalog so you can pick which products a campaign applies to, and to write a small app-owned badge metafield used to show "on sale" labels in your storefront theme.
- write_metaobjects and write_metaobject_definitions — used by the App's own internal data structures for campaign-related storefront content; not used to read or write anything about your customers.
- write_discounts — to create, update, and remove the Shopify discounts that power each campaign you set up in the App.
- read_orders — to read your store's paid orders, used only to award Loyalty points and to track discount/referral usage when you turn on the optional Loyalty Points and/or Customer Affiliate features. We read the order total, currency, and which discount code (if any) was used — never payment or financial details.
OfferForge does not request any permission to read your customers' names, addresses, phone numbers, or payment details, and it has no code path that could read that information even if it wanted to.
c) Information you type into the App yourself
When you use OfferForge's own features, we store exactly what you enter:
- Discount campaigns you create — title, discount type and amount, which products/collections/tags it applies to, and scheduling dates.
- Support questions you ask through the App's built-in "Ask a question" page — your question text and, only if you choose to provide one, a contact email address for our reply.
- Your preferred display language for the App's interface.
None of this is customer data — it is your own store-configuration data.
d) Information about your customers — only if you turn on Loyalty Points or Customer Affiliate
These two features are off by default and only ever activate if you turn them on yourself. Once turned on, and only for the customers who actually interact with them, we store:
- Their email address, and their Shopify customer ID once it's known (set the first time they place an order, or when they log in to their own Loyalty/Affiliate account).
- Loyalty Points: their current points balance and a history of what they've redeemed and when.
- Customer Affiliate: their referral code, a count of clicks on their personal share link (just a number — no IP address or other visitor data is stored), and a record of orders placed using their link (the order total, and whether it was a self-referral) so rewards can be calculated.
- A short-lived, single-use login code when a customer requests a link to access their own account — we never store the actual code, only a one-way hash of it, the same way a password would be stored.
This data is used only to run the feature the customer is actively using, is never sold or shared with anyone besides you (the merchant) and the service providers in section 3 below, and is scoped to your store exactly like everything else in the App.
3. Third-party services
We use Resend, an email-delivery service, for three things: notifying the App's developer when you submit a support question; emailing you back when we reply to that question, from a verified OfferForge-owned address; and, only if you've turned on Loyalty Points or Customer Affiliate, emailing one of your customers a one-time login link when they request to access their own account. Resend's own privacy policy applies to these transmissions. We do not use Resend, or any other third-party service, for analytics, tracking, or any purpose beyond sending the specific emails described here.
4. How long we keep data, and deletion
We keep your campaign, support-question, and (if enabled) Loyalty/Affiliate data for as long as the App stays installed on your store. When you uninstall OfferForge, Shopify notifies us automatically, and all of it — including every customer's Loyalty and Affiliate data — is permanently deleted from our database within about 48 hours, in line with Shopify's own data protection requirements. You can also ask us to delete your store's data sooner — see "Contact us" below.
If one of your customers asks you (the merchant) to delete their personal data, Shopify's standard customer-redaction process notifies us automatically, and we delete that customer's Loyalty and Affiliate data — their account, points balance, redemption history, and affiliate record — within our systems right away, while keeping purely store-level records (like "an affiliate drove X sales") that no longer identify them.
5. Your rights
You can ask us at any time what data we hold about your store, or ask us to delete it, using the contact details below.
If you run Loyalty Points or Customer Affiliate, your customers' requests about their own data (what we hold, or asking for it to be deleted) should go through you as usual — the same standard Shopify customer-data process you already use for any other app — and we'll act on it automatically, as described in section 4 above. They're also welcome to contact us directly using the details below if that's easier.
6. Changes to this policy
If what the App collects or how it's used changes, we'll update this page and the "Last updated" date above.
7. Contact us
Questions about this policy or your data: email support@useofferforge.com, or, if you already have the App installed, use the "Ask a question" page inside OfferForge.