PerkJar is a Shopify app made and run by Jamie Farrell through TFC Business Solutions LLC, Orlando, Florida ("I" and "me" below). This policy explains what PerkJar stores when a merchant installs it on a Shopify store, why, where it is kept and how it is deleted. It is written for the merchant who installs the app and for the people who shop at that store.
For shoppers' data, the merchant decides what the program is for, and I process that data on the merchant's behalf. If you are a shopper, the store you bought from is your first point of contact. You can also email me.
What PerkJar stores
About the store
- The store's Shopify domain, name and currency, the plan it is on, and the program settings the merchant chooses, such as earn rates, rewards, the referral offer and the launcher design.
- Order facts needed for points and billing: order ID and number, subtotal, the discount codes used, refund amounts and the order date. Not the products ordered, addresses or payment details.
About program members (the store's customers)
| Data | Why |
|---|---|
| Shopify customer ID, first name and email | To know who the member is and show their balance |
| Points balance and points history (each change with its reason, a note and the order ID) | To run the program and keep a ledger the merchant can check |
| Birthday, month and day only, if the merchant adds it | For the optional birthday bonus |
| The member's referral code and the reward codes they redeemed, with whether each was used | So codes work at checkout and can't be reused |
| Referral friends' email addresses and Shopify customer IDs, with the order ID and status | To reward the first order only and to block self-referrals and repeats |
| Referral link clicks, with a one-way hash of the visitor's IP address and browser string | To tell a page refresh from a second visitor. The raw IP address is not stored |
PerkJar does not store phone numbers, postal addresses or payment details.
Why, and the Shopify access it asks for
PerkJar uses this data only to run the store's points and referral program and to work out its 1% usage fee. It asks Shopify for access to read and update customers (to enrol members), create discounts (to issue codes) and read orders (to grant points and count codes).
Where data is kept and who sees it
The copy of PerkJar you install from the Shopify App Store runs at perkjar.shoplyft.online on shared web hosting from Spaceship, my hosting provider, and keeps its data in a database file on that server. I also run private copies of the app for a few stores I work with directly. Those run on Railway, which says it encrypts the data it stores. Data travels only between Shopify and the app, and every connection is served over HTTPS.
Shopify is the platform the app runs on. To bill the 1% usage charge, the app sends Shopify the store's ID and an amount, nothing about shoppers. Apart from Shopify and those two hosts, there are no sub-processors. For merchants, the data processing agreement sets out how I handle this data on your behalf.
Studio keeps a log of each time someone opens a list or record with personal data in it, or downloads an export: what was opened, when, and the staff account when Shopify provides it. I keep each entry for 180 days, then delete it, and the whole log goes sooner if the store's data is erased.
What I never do
- I never sell data or share it with advertisers.
- There are no third-party trackers, analytics tools or advertising pixels in the app or its storefront blocks.
- The app stores no phone numbers and no payment details. Shopify handles payments.
PerkJar sends no marketing email. Its "share by email" button opens the customer's own mail app.
Cookies
PerkJar's storefront blocks set no cookies. In Shopify admin the app uses Shopify's own session tokens, and Studio uses a short-lived signed token held in memory while it is open.
Keeping and deleting data
PerkJar keeps member data while the app is installed. A merchant can adjust or remove members in Studio at any time.
- When a customer asks to be deleted. Shopify sends the app a redact request. PerkJar deletes that member, their points history and their reward codes, and clears their email and customer ID from referral records. Any data request file prepared for them is deleted too.
- When a merchant uninstalls. The app stops working on the storefront right away. Shopify asks apps to erase a store's data 48 hours after uninstall. When that request arrives, the app deletes everything it holds for the store.
- Data requests. When a customer asks a merchant for their data, Shopify tells the app. PerkJar gathers everything it holds about that customer into a file, and the merchant downloads it from Studio (Members, under Customer data requests) and sends it to the customer. Nothing goes to the customer automatically. I will help if asked. I keep the file for 30 days after the merchant first downloads it, or 90 days if it is never downloaded, then delete it.
This website
The website at shoplyft.online sets no cookies, runs no analytics and loads nothing from other servers. It uses your device's own fonts. My web host may keep standard server logs, such as IP addresses and the pages requested, to keep the site running.
Changes and contact
If this policy changes, I will update this page and the date at the top. Questions or requests: him@thejamiefarrell.com, or write to TFC Business Solutions LLC, Orlando, Florida.