1. Who this policy covers
NviedPro is a Shopify application used by merchants to run interactive storefront games and collect reward submissions. This policy covers information from merchants using NviedPro, visitors using NviedPro popups on a merchant's store, and people contacting NviedPro support.
The merchant controls its own storefront, determines the purposes of its marketing campaigns, and is responsible for its own customer-facing privacy notices. NviedPro processes storefront customer information to provide the requested service to that merchant. For information about a particular merchant's independent practices, consult that merchant's privacy policy.
2. Information we collect
- Merchant and account data: Shopify store identifier, authorized app sessions and permissions, campaign configurations, branding, plan and billing status, and contact information the merchant provides for support.
- Reward submissions: A shopper's email address, international phone number, game and campaign identifiers, reward percentage, issued discount details, and the time and outcome of a claim.
- Consent records: Whether the shopper agreed to reward terms and whether they separately opted into email or SMS marketing, together with relevant consent times and integration results.
- Usage and security information: Popup views, game plays, wins, reward events, campaign reporting, short-lived session identifiers, and limited security or diagnostic data used to protect the service against misuse.
- Integration information: Merchant-selected marketing providers, audience or campaign tag settings, encrypted provider API credentials where applicable, and synchronization status.
Please do not send payment card details, passwords, or sensitive personal information through popup forms or support messages. Shopify manages the relevant subscription billing and storefront checkout processes.
3. How we use information
We use this information to authenticate Shopify merchants, display and manage their campaigns, operate games, determine reward eligibility, issue single-use Shopify discount codes, prevent repeat claims using email and phone records within each store, maintain security, provide campaign analytics, process support requests, and administer subscriptions.
We send shopper information to an email marketing provider only when the shopper has provided the relevant marketing consent and the merchant has connected and configured that provider. Reward participation alone does not authorize marketing. Consent and opt-out decisions are respected in accordance with the applicable provider's controls.
4. Service providers and data sharing
Shopify handles store authentication, permissions, discount creation, and applicable app subscription billing. NviedPro may use Render for application hosting and managed database services. Merchant-enabled marketing destinations may include Shopify Email (Shopify Messaging), Klaviyo, Mailchimp, ActiveCampaign, Brevo, and Omnisend. We disclose relevant information to these services only for their roles in operating NviedPro or fulfilling the merchant's authorized instructions.
We do not sell shopper email addresses or phone numbers. We do not supply marketing contact data to unrelated merchants. Each Shopify store's reward eligibility records are maintained separately.
5. Cookies, sessions and analytics
NviedPro uses app sessions and limited browser storage or session identifiers to support sign-in, prevent duplicate popups during a browsing session, maintain a game session, and measure campaign activity. We also use application-side events to display aggregated merchant analytics. These functions are not a separate advertising-tracking service.
Merchants should assess any required cookie or privacy notices for their storefronts and any independent analytics or marketing tools they use.
6. Data retention and security
We retain account, campaign, and claim information for as long as reasonably needed to provide the service, maintain reward integrity, address support or security matters, and comply with applicable legal obligations. Data is subject to deletion or de-identification when no longer required and to applicable privacy requests.
We use authenticated access controls, store-scoped data access, encrypted third-party API credentials, HTTPS in production, and database access restrictions. No online service can guarantee absolute security. Backups and legally required records may have separate deletion schedules.
7. Your rights and privacy requests
Depending on applicable law, individuals may request access to, correction of, or deletion of personal data, or object to certain processing. Shoppers can contact the merchant whose store collected the information. Merchants and shoppers can also contact NviedPro at support@nviedpro.com to request assistance.
NviedPro receives Shopify's mandatory customer data access and redaction requests and shop redaction notifications. We process verified requests according to applicable requirements and any legal retention obligations. Marketing recipients can withdraw consent using the unsubscribe or opt-out instructions supplied by the relevant merchant or messaging platform.
8. International processing
Shopify, Render, and merchant-selected integration providers may process or store information in locations different from the merchant's or shopper's country. Where applicable, the parties responsible for those transfers must use appropriate safeguards under relevant data protection laws.
9. Children
NviedPro is designed for merchants and general Shopify storefront visitors, not as a service directed to children. Merchants are responsible for determining whether their campaigns are appropriate for their audiences and for complying with laws relevant to minors.
10. Changes and contact
We may update this policy to reflect changes in our services, providers, or legal obligations. Material changes will be communicated when required. The updated date will appear on this page.
For privacy questions or requests, email support@nviedpro.com. The legal operating entity and business mailing address must be confirmed and added before public launch.