Privacy Policy

Last updated: March 3, 2026

Wishalert: Favorites and BIS ("the App") is developed and operated by Nodus Works. This Privacy Policy describes how we collect, use, and share information when you install and use our Shopify application.

Information We Collect

When merchants install and use the App, we collect:

• Store information: Shop domain, access tokens provided by Shopify during OAuth authentication.
• Customer data (via storefront): Customer IDs (provided by Shopify), email addresses (only when customers voluntarily subscribe to back-in-stock notifications), and wishlist product selections.
• Usage data: Aggregate counts of wishlist actions, back-in-stock subscriptions, and add-to-cart events for analytics purposes.

How We Use Information

• To provide wishlist functionality, allowing shoppers to save and manage favorite products.
• To send back-in-stock email notifications when subscribed products become available.
• To display analytics and insights to merchants within the app dashboard.
• To track revenue attribution from wishlist and back-in-stock interactions.

Data Sharing

We do not sell, trade, or rent personal information. We share data only with:

• Mailjet: Email addresses are shared with Mailjet solely for sending back-in-stock notification emails on behalf of the merchant.
• Shopify: We interact with the Shopify API as required for app functionality.

Data Retention

We retain store and customer data for as long as the App is installed. Upon uninstallation, session data is deleted immediately. Wishlist and subscription data is retained for up to 30 days after uninstallation, then permanently deleted. Merchants can request immediate deletion at any time.

GDPR Compliance

We comply with GDPR and Shopify's mandatory privacy requirements. We handle:

• Customer data requests: We process data access requests and provide all stored customer information.
• Customer data erasure: Upon request, we permanently delete all customer wishlists, back-in-stock subscriptions, and associated data.
• Shop data erasure: When requested, we permanently delete all shop data including settings, wishlists, subscriptions, and usage records.

Security

All data is transmitted over HTTPS/TLS. We verify all Shopify webhook signatures using HMAC-SHA256. Data is stored in encrypted PostgreSQL databases hosted on secure cloud infrastructure.

Contact

For privacy-related inquiries, please contact us at support@nodusworks.com.