Privacy policy
Who we are
Loyalino ("the app") is a loyalty and rewards application for Shopify stores, operated by OkayScale ApS, Denmark. This policy explains what data the app processes when a merchant installs it, and how that data is handled.
Data we process
To run a loyalty program for your store, the app processes the following data on your behalf:
- Store information: shop domain, store name, currency, plan, and the settings you configure inside the app.
- Customer information: customer id, name, email address, storefront language, points balance, VIP tier, referral activity and reward history. This data is processed solely to operate your loyalty program.
- Order information: order totals, line items and currency, used only to award points and apply your earning rules.
The merchant remains the data controller for all customer data. The app acts as a data processor.
What we never do
- We never sell personal data.
- We never use customer data for advertising or profiling.
- We never share data with third parties beyond the subprocessors listed below.
Subprocessors
- Railway — application hosting and database (EU region).
- Resend and Amazon Web Services SES — transactional email delivery.
- Shopify — platform APIs, billing and webhooks.
Where you connect a third-party integration yourself (for example Klaviyo, HubSpot or a review app), loyalty data is sent to that service at your instruction and under your agreement with them.
GDPR and data deletion
The app implements Shopify's mandatory privacy webhooks. When a customer requests their data, we export everything we hold about them. When a customer or a store requests deletion, the related records are removed from our database. Uninstalling the app triggers cleanup of the store's data in line with Shopify's data retention rules.
Data retention and security
Data is stored encrypted at rest and transferred over TLS. Integration credentials are encrypted with AES-256-GCM. We retain loyalty data only while the app is installed, plus the grace period Shopify mandates for reinstalls, after which it is deleted.
Billing and trial history: OkayScale administers merchant billing as an independent controller. To avoid accidentally granting a repeat trial, we keep a minimal pseudonymous record keyed by a hash of the Shopify shop ID, without an email address, store domain or payment details. It is deleted 180 days after the last confirmed subscription or trial evidence. An ordinary uninstall does not reset that history, and Shopify's history is checked again before trial eligibility is decided; expiry of our local record does not grant a new trial.
Completed billing-approval records are retained for 180 days. Pending or uncertain approvals remain until reconciled, then for 180 days. Approval links are encrypted while needed and cleared when the approval reaches a final state. Shopify-verified store-redaction requests remove both the trial-history record and billing-approval records.
Cookies on this website
This marketing site sets no analytics or advertising cookies and embeds no third-party trackers. The only external request it makes is to Google Fonts for the typeface.
Contact
Questions about privacy or data handling: email support@loyalino.io. Help center: help.loyalino.io.