1. Introduction
This Privacy Policy explains how XavierApps ("we", "us", or "our") collects, uses, discloses, and safeguards your information when you visit our website at https://www.xavierapps.ai, contact us, or install and use our Shopify applications, including Bundle Wave and Wishlist Flow (collectively, the "Services").
By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.
2. Who We Are
XavierApps is a Shopify app development agency. For the purposes of data protection law, we may act as a "data controller" for information collected through our website, and as a "data processor" acting on behalf of Shopify merchants for information processed through our apps.
3. Information We Collect
We collect different types of information depending on how you interact with us:
- Website visitors: name, email address, and message content when you submit a contact form or subscribe to our newsletter; and analytics data such as IP address, browser type, pages visited, and referring URLs.
- Shopify merchants: your store name, store URL, contact details, and app configuration settings when you install one of our apps.
- Store customers (end users): when a merchant uses our apps, we may process limited customer data on the merchant's behalf, such as order details, product interactions, wishlist items, and email addresses used for app features (for example, price-drop or recovery emails).
- Usage data: information about how our apps and website are used, collected automatically to help us improve performance and reliability.
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our Services;
- Respond to your inquiries and provide customer support;
- Send transactional emails and, where you have opted in, marketing communications;
- Enable app features configured by the merchant (such as bundles, wishlists, and recovery emails);
- Monitor usage, prevent fraud, and improve the security and performance of our Services;
- Comply with legal obligations.
5. Cookies and Analytics
Our website uses cookies and similar technologies. We use Google Analytics to understand how visitors use our site. Google Analytics may set cookies to collect information such as your IP address and browsing behavior. You can control cookies through your browser settings and opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.
6. How We Share Information
We do not sell your personal information. We may share information with:
- Shopify: our apps operate on the Shopify platform and exchange data with Shopify's APIs as required to function;
- Service providers: trusted third parties who help us operate our Services (for example, hosting, email delivery, and analytics), bound by confidentiality obligations;
- Legal requirements: authorities when required by law, regulation, or valid legal process;
- Business transfers: in connection with a merger, acquisition, or sale of assets, in which case we will notify affected users.
7. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. When a merchant uninstalls one of our apps, we delete or anonymize associated data within a reasonable period, except where retention is required by law.
8. Your Rights
Depending on your location, you may have rights regarding your personal data, including the right to access, correct, delete, or restrict its processing, and the right to data portability. These rights may arise under laws such as the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and India's Digital Personal Data Protection Act (DPDP).
If you are a store customer, please direct data requests to the merchant whose store you interacted with, as they control that data. For data we control directly, you can contact us using the details below.
9. Data Security
We implement appropriate technical and organizational measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including where our service providers operate. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.
11. Children's Privacy
Our Services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe we have collected such information, please contact us so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. We encourage you to review this policy periodically.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: