Sweetener
Privacy policy
Draft, not yet in force. Last updated 30 September 2026.
Sweetener is a Shopify app that runs free gift with purchase promotions. This policy explains what we store when a store installs it, why, where it is kept and how long for. It is written for merchants, and for shoppers who want to know what happens to their data when they buy from a store that uses Sweetener.
The short version
- We store what a store needs to run its gift campaigns, and no more.
- We do not store shoppers' names, email addresses, postal addresses or payment details.
- Your data is kept in the EU.
- Uninstall, and everything we hold for your store is deleted within 48 hours of Shopify telling us to.
- We never sell data, and we do not use it for advertising.
Who we are
Sweetener is made and run by Darragh Verschoyle in Ireland. For the data described here we are the data processor, acting for the Shopify merchant who installed the app, who is the controller. For your own contact with us, such as a support email, we are the controller. Write to privacy@sweetener.ie about anything in this policy.
What we store about a store
| Data | Why |
|---|---|
| Your store's Shopify address, the access token Shopify issues to the app, and the permissions you granted | To act on your store: create the gift discounts and publish your campaigns |
| Your plan, currencies and time zone, and when you installed or uninstalled | To price gifts in each currency, start and end campaigns on time, and know which features your plan includes |
| Your campaigns: names, rules, gift products, dates and settings, with a history of each change and who made it (you, a schedule or a plan change) | To run the campaigns, and so you can see what changed and why |
| A record of the webhooks Shopify sends us | So we handle each one once, even when Shopify sends it again |
We read your products to let you pick gifts and to check whether a gift is in stock, and your orders to count gift orders on the free plan. We do not keep copies of your products or orders.
What we store about shoppers
Nothing that identifies them. The gift is added and priced inside your store and Shopify's checkout; shoppers' browsers never talk to our servers. Where we count gift orders, we keep numbers per campaign, not details of who ordered. If a shopper asks your store for the data we hold on them, the answer is none.
Where it is kept, and who helps us
| Provider | What for | Where |
|---|---|---|
| Shopify | The platform the app runs on, and billing | Shopify's own terms and data locations |
| Vercel | Runs the app | Dublin, Ireland |
| Supabase | The database | Dublin, Ireland |
Vercel and Supabase are US companies. We keep your data in their Irish regions, and they are bound by the EU's standard contractual clauses for any access from outside the EU.
How long we keep it
For as long as the app is installed. When you uninstall, we stop using your store's access token straight away. Shopify then sends us a request to erase your store's data 48 hours later, and we delete everything we hold for your store within 48 hours of receiving it.
Your rights
Under the GDPR you can ask to see, correct or delete personal data, or object to how it is used. Shoppers should contact the store they bought from, which will pass the request to us through Shopify. Merchants can write to us directly. You can also complain to the Data Protection Commission in Ireland.
Changes
If this policy changes in a way that matters, we'll tell installed stores inside the app before it takes effect, and update the date at the top.