Key terms
These short definitions explain words used in this policy.
- BSS Commerce, BSS, we, us
- The company that makes the Shopify apps this policy covers. BSS Commerce is a partner of Shopify Inc.
- The App
- The Shopify apps that BSS Commerce provides.
- The Services
- The consulting and support services BSS Commerce offers to merchants who use Shopify.
- The Site
- The BSS Commerce website.
- Personal information (Personal Data)
- Information about you that we collect, in the categories listed in section 2.
- Shopify APIs
- The technical connections that let the App read certain information from your Shopify account.
- Cookie
- A data file placed on your device or computer, often with an anonymous unique identifier.
- Log file
- A file that tracks actions on the Site, such as your IP address, browser type and date/time stamps.
- Web beacon, tag, pixel
- An electronic file used to record information about how you browse the Site.
- GDPR, CCPA
- GDPR is the European privacy law (General Data Protection Regulation). CCPA is the California Consumer Privacy Act. Your rights under each are in section 7.
1. Introduction
BSS Commerce (hereinafter referred to as “BSS,” “we,” “us,” or “our”) is a partner of Shopify Inc. Our primary objective is to provide Shopify Apps (the “App”) and offer relevant consulting and support services (the “Services”) to merchants who rely on Shopify to power their online stores. This Privacy Policy outlines the manner in which we collect, utilize, and share personal information when you install or use the App in conjunction with your Shopify-supported store. It further elucidates your privacy rights and how applicable laws protect you.
In plain words
BSS Commerce makes Shopify apps and offers related consulting and support. This policy explains what personal information we collect, how we use and share it when you install or use the App with your Shopify store, and what rights you have under the law.
2. Personal information the App collects
Upon installing the App, we automatically gain access to specific types of information from your Shopify account via Shopify APIs, adhering to the Shopify APIs License and Terms of Use. Additionally, we may collect Personal Data about you when you voluntarily provide such information. The collected information may fall into the following categories and sources:
- Your store name and store email address.
- Customers’ email addresses.
- Information we receive when providing technical or customer support for you.
This information is required to deliver specific services. If you choose not to provide the requested information, kindly consider uninstalling our app from your Shopify Stores.
Moreover, when accessing the BSS Commerce website (the “Site”), we may employ various technologies to collect personal information, including but not limited to:
- Cookies: Data files placed on your device or computer, often containing an anonymous unique identifier. For more information about cookies, including instructions on how to disable them, please visit http://www.allaboutcookies.org.
- Log Files: These files track actions occurring on the Site, collecting data such as your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- Web Beacons, Tags, and Pixels: Electronic files used to record information about how you browse the Site.
In plain words
From your Shopify account (through Shopify APIs) and from you:
- Your store name and store email address.
- Customers’ email addresses.
- Information we receive when we give you technical or customer support.
From the Site: cookies, log files, and web beacons, tags and pixels.
We need this information to deliver specific services. If you choose not to provide the requested information, please consider uninstalling the App from your Shopify store.
3. Why do we collect your personal information?
We collect your data for the following reasons:
- To generate and save app configurations for your store.
- To maintain contact with you to resolve any issues you encounter while using our app.
- To facilitate the execution of various features within our app.
- To provide you with information or advertising related to our products or services.
In plain words
We collect your data to save your app configuration, to stay in touch and resolve problems you meet, to run the App’s features, and to provide you with information or advertising about our products or services.
4. Information storage and privacy commitment
Your personal and customer data will be stored on the servers of BSS Commerce in the United States, utilizing the Linode system, until you submit a cancellation request or uninstall our app from your store.
BSS Commerce is steadfast in ensuring the security and confidentiality of your data. We employ the latest technologies and software to deter data theft, unauthorized access, and disclosure, thereby safeguarding all the information we collect online. However, please be aware that no method of transmission over the internet or electronic storage is completely secure.
In plain words
- Where: on BSS Commerce servers in the United States, using the Linode system.
- How long: until you submit a cancellation request or uninstall the App from your store.
- Security: we use the latest technologies and software to protect the data. No method of internet transmission or electronic storage is completely secure.
5. Our cookies policy
Cookies are small text files created when users visit websites, improving the user experience by remembering login information, theme selections, preferences, and other custom functions. We employ cookies for the following purposes:
- Strictly Necessary Cookies: These are essential for the operation of our website and enable you to navigate and use its features.
- Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website, allowing us to improve its performance.
- Functionality Cookies: These cookies are used to recognize you when you return to our website and personalize content for you.
In plain words
Cookies are small text files created when you visit a website. We use three kinds: strictly necessary cookies (essential for the website to work), performance and analytics cookies (to understand how visitors use the website), and functionality cookies (to recognize you when you return and personalize content). The All About Cookies website explains cookies and how to disable them.
6. Links to other websites
While our app may contain links to other websites, please be advised that we do not have control over these external websites. Therefore, we cannot assume responsibility for the protection and privacy of any information you provide while visiting such sites. Furthermore, these external websites are not governed by this privacy statement, so it is advisable to exercise caution and review the privacy statement relevant to the respective website.
In plain words
Other websites are not covered by this privacy policy and we do not control them. Read the privacy statement of any site you visit.
7. Summary of your rights
| If you are | Law | Section | How the policy says to contact us |
|---|---|---|---|
| A resident of the European Economic Area | GDPR | 7.1 | Live chat |
| A resident of California | CCPA | 7.2 | Send us an email |
| A resident of Nevada | Nevada law | 7.3 | Live chat |
7.1. GDPR: European privacy rights
If you are a resident of the European Economic Area, you possess the following rights:
- Right to be informed: You have the right to know whether we hold your Personal Information and the purpose for which your Personal Information is processed.
- Right of access: You are entitled to obtain a copy of your Personal Information, along with an explanation of the categories of Personal Information being processed, the purposes of such Processing, and the details of third parties to whom the Personal Information may have been disclosed.
- Right to rectification: You have the right to correct/update your Personal Information available with us.
- Right to erasure: You are entitled to have your Personal Information erased from our customer relationship management (CRM) databases. It is important to note that we may need to retain certain Personal Information about you for legal and internal business reasons, such as fraud prevention. We will retain your Personal Information for as long as necessary to provide you with the websites and apps you are eligible to use and as needed to comply with our legal obligations and enforce our agreements.
- Right to data portability: You are entitled to obtain and reuse your Personal Information. You can either obtain the Personal Information from us or provide it to a third party if you so wish, or request us to transfer your Personal Information directly to a third party.
- Right to object/restrict Processing or both: You have the right to object/restrict the Processing of your Personal Information in certain circumstances, including situations where the Personal Information is inaccurate (during the period when we verify the Personal Information), when the Personal Information is no longer required for the intended purpose of Processing, or in connection with direct marketing. You can prevent or discontinue marketing communications by checking certain boxes on the forms used to collect your Personal Information, or by utilizing opt-out mechanisms in the emails we send you. You also have the right not to be subject to a decision based solely on automated Processing, including profiling, which produces legal effects that significantly affect you.
In these cases, we will retain minimal Personal Information to record your choice of opting out from further contact. For exercising any of the aforementioned rights, please contact us via live chat
In plain words
- Informed: know whether we hold your personal information and why we process it.
- Access: get a copy of it, with an explanation of what is processed and which third parties it may have been shared with.
- Rectification: correct or update it.
- Erasure: have it erased from our customer relationship management (CRM) databases. We may need to keep some information for legal and internal business reasons, such as fraud prevention.
- Portability: obtain and reuse it, or ask us to transfer it directly to a third party.
- Object or restrict: in certain circumstances, for example when the information is inaccurate (while we verify it), no longer needed for its purpose, or used for direct marketing. You can stop marketing communications through the opt-out options in our forms and emails. We then keep minimal information to record that you opted out. You also have the right not to be subject to a decision based solely on automated processing, including profiling, that significantly affects you.
To use any of these rights, contact us via live chat.
7.2. California privacy rights
If you are a resident of California, please note the following details regarding the personal information we collect about you and your rights under the California Consumer Privacy Act (CCPA):
- Subject to certain limitations, the CCPA provides you with the following rights
- Right to access: You have the right to request access to details on the categories or specific pieces of personal information we collect and/or sell, including how we use and disclose this information, and to whom we may sell it.
- Right to deletion: You can request the deletion of any of your personal information.
- Right to opt-out: You have the right to opt-out of any “sale” of your personal information that may occur.
- Right to non-discrimination: We will not discriminate against you for exercising any of the above rights.
To exercise your California privacy rights under the CCPA, please send us an email. We will verify your request using information associated with your account, including your email address. Further identification may be required. You may also designate an authorized representative to act on your behalf.
In plain words
- Access: ask about the categories or specific pieces of personal information we collect and/or sell, how we use and disclose them, and to whom we may sell them.
- Deletion: ask us to delete your personal information.
- Opt-out: opt out of any “sale” of your personal information that may occur.
- Non-discrimination: we will not discriminate against you for using these rights.
To use these rights, send us an email. We verify your request using information linked to your account, including your email address. We may ask for more identification. You can also name an authorized representative to act for you.
7.3. Nevada privacy rights
Nevada law obliges us to offer certain Nevada residents the option to opt-out of the “sale” of “personally identifiable information,” as defined by Nevada law. We do not engage in such activities. However, if you are a Nevada resident who has purchased goods or services from us, you may submit a request under Nevada law to opt-out of any potential future sales via live chat
In plain words
Nevada law requires us to let certain Nevada residents opt out of the “sale” of “personally identifiable information”. We do not engage in such activities. If you are a Nevada resident who has purchased goods or services from us, you can still submit a request via live chat to opt out of any potential future sales.
Contact us
If you have any questions about Our App or this Privacy Policy, please contact us via live chat, or by post at 14-16-18-19F, Viwaseen Tower, 48 To Huu Str, Trung Van Ward, Nam Tu Liem Dist., Hanoi, Viet Nam. Please ensure that your query is clear, particularly if it is a request for information about the data we hold about you.
Ways to reach us:
- Live chat in the BSS Commerce app.
- The contact form on this site.
- The support page in the BSS B2B Help Center.
- By post: 14-16-18-19F, Viwaseen Tower, 48 To Huu Str, Trung Van Ward, Nam Tu Liem Dist., Hanoi, Viet Nam.
Shopify’s terms
When you install the App, we access information from your Shopify account through Shopify APIs, under the Shopify APIs License and Terms of Use. Shopify publishes those terms itself: Shopify API License and Terms of Use (checked 2026-10-05). Shopify may change them at any time.
Frequently asked questions
These answers repeat what the policy above already says.
What information does the App collect?
Your store name and store email address, customers’ email addresses, and the information we receive when we give you technical or customer support. On the Site we may also use cookies, log files, and web beacons, tags and pixels.
Why do you collect it?
To generate and save app configurations for your store, to keep in contact and resolve issues, to run the App’s features, and to provide you with information or advertising related to our products or services.
Where is my data stored, and for how long?
On BSS Commerce servers in the United States, using the Linode system, until you submit a cancellation request or uninstall the App from your store.
What if I do not want to provide the information?
It is required to deliver specific services. If you choose not to provide it, please consider uninstalling the App from your Shopify store.
How do I use my privacy rights?
If you are in the European Economic Area, contact us via live chat. If you are in California, send us an email. If you are in Nevada, use live chat. Section 7 explains each right.
Where can I send a written request?
By post to 14-16-18-19F, Viwaseen Tower, 48 To Huu Str, Trung Van Ward, Nam Tu Liem Dist., Hanoi, Viet Nam. Please make your query clear, particularly if it asks for information about the data we hold about you.