1. Who is responsible for your information
Opmeris provides commerce software for Shopify merchants. We are responsible for information collected to operate our website, manage business relationships, and respond to enquiries. When our apps process a store’s customer information to provide their features, we act on the merchant’s instructions. The merchant remains responsible for its relationship with its customers and its own privacy notice.
Contact us at hello@opmeris.com with privacy questions or requests.
2. Information we collect
- Information you provide: your name, email address, store URL, product settings, support messages, and other details you choose to share with us.
- Store and installation information: Shopify shop identifiers and domain, app installation status, granted permissions, authorization credentials, and app configuration. Each app has its own authorization and installation records.
- Information used by Repeat: authorized order and line-item details, product and variant identifiers, purchase dates, quantities, and customer identifiers needed for Buy Again and replenishment. Where authorized and needed for reminders, this includes the customer email address and message delivery information. We also process product rules, replenishment candidates, and reminder status.
- Email configuration: the provider you select, sender address, and credentials you supply to connect your email service.
- Technical information: request times, IP addresses, browser and device details, errors, and security logs generated when you access our services. Our infrastructure providers may process this information to deliver and protect the service.
We access Shopify information only through the permissions granted to the relevant app. We do not need full payment card details to provide Repeat.
3. How we use information
We use information to provide and maintain our services, authenticate installations, display eligible previous purchases, apply replenishment rules, schedule and deliver merchant-configured reminders, troubleshoot problems, respond to support requests, protect against abuse, and meet legal obligations.
For our own business activities, applicable legal bases include performing our agreement with you, our legitimate interests in providing and securing our services, compliance with law, and consent where required. For merchant-directed customer processing, the merchant is responsible for establishing an appropriate legal basis and obtaining any required consent.
We do not sell personal information or share it for cross-context behavioral advertising. Installing one Opmeris app does not authorize another to access its Shopify data.
4. Who receives information
We share information with service providers only as needed to operate the service, including hosting, database, security, support, and email delivery providers. These providers may process information on our behalf under applicable contractual obligations. When you connect an email provider such as SendGrid or Postmark, the information needed for delivery is sent to that provider under your configuration and its terms.
We exchange information with Shopify to authenticate and operate the apps. Shopify’s handling of information is described in Shopify’s privacy policy. We may also disclose information when legally required, to protect rights and safety, or in connection with a business transfer subject to appropriate confidentiality and privacy protections.
5. Cookies and analytics
Our public website does not include advertising pixels or third-party behavioral analytics scripts. Hosting providers may process request logs for operation and security. App authentication and Shopify surfaces may use necessary cookies or similar technologies to maintain sessions and protect access.
Repeat’s operational records, such as replenishment and reminder status, support the app’s features; they are not advertising profiles. You can manage cookies through your browser. Blocking necessary cookies may affect app sign-in or functionality. If we introduce optional analytics or marketing cookies, we will explain their purpose and request consent where required before enabling them.
6. Retention, uninstalling, and deletion
We retain information only for as long as it is needed for the purpose described in this policy. Installation and configuration records support the active service; replenishment and reminder records support the configured workflow; support correspondence is kept as needed to resolve enquiries and maintain relevant business records. Security and legal records may be retained for longer where necessary to prevent abuse, resolve disputes, or comply with law.
Uninstalling an app revokes its access through Shopify. We handle app-related deletion through Shopify’s privacy request processes and verified requests sent to us. Data that is no longer necessary is deleted or de-identified, except information that must be retained for legal or security purposes. Residual backup copies remain protected until they expire through the backup lifecycle. Uninstalling one app does not remove a separate app installation.
7. Security and international processing
We use access controls, encrypted connections, and encryption for sensitive stored credentials to protect information. Access is limited to people and providers who need it to operate and support the service. No storage or transmission method can guarantee absolute security.
Our providers may process information outside your country. Where applicable law requires safeguards for international transfers, we use legally recognized transfer mechanisms, such as appropriate contractual protections. Contact us for information about providers and safeguards relevant to your use of our services.
8. Your choices and privacy rights
Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a portable copy of your information; restrict or object to processing; withdraw consent; or appeal a request decision. You may also complain to your local data protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.
Merchants can change app settings, manage permissions through Shopify, uninstall an app, or email us to request help with their information. Customers should contact the store they purchased from first, so the merchant can verify the request and instruct us. We assist merchants with relevant Shopify data access and deletion requests.
To contact us directly, email hello@opmeris.com with “Privacy request” in the subject line. We may ask for information needed to verify your identity and authority. We respond within the time required by applicable law and explain any lawful limitations. We do not discriminate against people for exercising their privacy rights.
For reminder messages, use the unsubscribe option provided in the message or contact the merchant to update your preferences. Merchants are responsible for honoring customer communication choices.
9. Children’s information
Our services are intended for businesses and are not directed to children. We do not knowingly collect children’s information for our own purposes. If you believe a child has provided information to us, contact us so we can investigate and take appropriate action.
10. Changes and contact
We may update this policy as our services or legal requirements change. The effective date above identifies the current version. We will provide additional notice of material changes where required.
For questions about this policy, contact hello@opmeris.com. You can also visit our contact page or read our terms of service.