EdgeCraft Discounts privacy policy
Last updated: October 19, 2026
EdgeCraft Discounts (“the app”) is a Shopify app that lets merchants create discounts and show shoppers how to unlock them. It is operated by Ali Raza, an individual developer (“we”, “us”). This policy explains what information the app collects when a merchant installs it, how we use it, and when we delete it. Questions go to razadevstudio@gmail.com.
Information about your store
When you install the app, Shopify gives it access to your store. We store:
- your store’s Shopify domain, the access token Shopify issues to the app, and the access scopes you granted;
- your store’s time zone and currency, so reports use your own days and money;
- your app settings, and records of your discounts’ schedules, clearance stages, loyalty points and payment-method programs (most discount settings are saved in your own store, on the discount itself);
- your EdgeCraft plan, as Shopify reports it to us;
- the Shopify user ID (a number) of the staff member who changes a sale’s exclusion list or the global exclusion list, or adjusts a customer’s points, so you have a record of who changed what. We don’t store staff names or email addresses;
- logs of the app’s background jobs and of the webhooks Shopify sends it.
Information about your customers
The app stores Shopify’s numeric customer ID with some order records. It never stores customer names, email addresses, phone numbers, postal addresses, payment card details or IP addresses.
- Analytics. For each order: the order ID and date, the order total, the discount amount and which of the app’s discounts applied, refunds, whether it was a test order, whether the customer was new or returning, and the customer ID. These come from Shopify’s order and refund webhooks, plus a one-time import of the last 60 days of orders when you install the app.
- Loyalty points (only if you use loyalty points redemption): each change to a customer’s balance, with the customer ID, the order ID and number, and the balance before and after. The balance itself is saved in your store, on the customer.
- Payment-method incentive audit (only if you use it): the order ID and number, the payment method the customer chose at checkout, the payment gateway names on the order, the discount amount and the customer ID. If you turn on tagging, the app adds a tag to a customer whose payment didn’t match their choice.
Discount logic runs as Shopify Functions inside Shopify, so cart contents and customer details used at checkout are processed by Shopify and not sent to us. The storefront widgets run in the shopper’s browser and use what your theme already shows, such as the cart and whether the shopper is signed in. To show trade (wholesale) pricing, Shopify forwards the signed-in customer’s ID to the app, which reads that customer’s tags and company from Shopify to answer the request and doesn’t store them.
Cookies and browser storage
The app sets no cookies. On your storefront, it keeps two values in the browser’s
session storage, which is cleared when the shopper closes the tab: whether they dismissed
the announcement bar (edgecraft:bar:dismissed) and whether they dismissed
the sign-in prompt (edgecraft:sign-in:dismissed).
How we use this information
Only to run the app for you: to apply and report on your discounts, settle loyalty points, audit payment-method incentives, count discounted orders against your plan’s limits, and keep the app’s background jobs working. We don’t sell this information, use it for advertising, or combine it with data from other sources.
Who we share it with
No third parties other than Shopify and our two hosting providers. The app talks to Shopify’s APIs, including Shopify’s Partner API to read your plan. The app and its database run on Railway, in the United States. Railway stores the data on our behalf and may keep standard server logs for security and operation. Cloudflare serves this policy and the app’s merchant guides. It receives no store or customer data from the app, and may keep standard logs of visits to these pages. We will disclose information if the law requires it.
How long we keep it
- Background job logs: 14 days.
- Webhook delivery records: 30 days.
- Order, loyalty points and audit records: while the app is installed. They are not deleted on a schedule; they are deleted when Shopify asks us to, as described below.
Uninstalling and deletion requests
- When you uninstall the app, we delete your store’s access tokens, stop the app’s background jobs for your store, and clear your stored plan.
- 48 hours after you uninstall, Shopify sends a shop deletion request. We then delete everything the app holds for your store: order records and analytics, your time zone and currency, loyalty points and payment-method programs and records, clearance programs, schedules, exclusion and change histories, setup records, plan records, storefront rebuild records, job logs, webhook delivery records and access tokens.
- When a customer asks to be deleted, Shopify sends us a customer deletion request. We delete that customer’s loyalty points history and remove their customer ID from the order and payment audit records we keep.
- When a customer asks for their data, Shopify forwards the request to us. We handle these requests by hand: we reply to the merchant by email with the records we hold for that customer.
Your rights
Merchants can ask us at any time to see, correct or delete the information we hold about their store by writing to razadevstudio@gmail.com. Customers of a store should contact that store, which decides how their information is used; we help the store answer.
Security
All traffic to and from the app uses HTTPS. Access to the stored data is limited to the operator.
Changes to this policy
When the app starts collecting something new, we update this page and the date at the top.
Contact
Ali Raza, razadevstudio@gmail.com