Privacy Policy
Last updated: July 9, 2026
1. Introduction
Welcome to Spin Boost ("we", "our", or "us"). We provide an interactive storefront spin-wheel widget for Shopify merchants to collect customer emails, phone numbers, and improve conversion rates.
This Privacy Policy explains how we collect, store, and process personal data when you install our app on your Shopify store, and when customers interact with the Spin Boost widget on your storefront.
2. Information We Collect
We only collect the minimum amount of information necessary to perform our services:
- Merchant Data: We collect your Shopify store name, shop domain, access scopes, and offline authorization tokens to host campaigns and dashboard analytics.
- Customer Data: When customers interact with the spin-wheel popup on your storefront, we collect their email addresses and/or phone numbers (if they opt in), and spin records (impressions, spin outcomes, generated discount codes).
3. How We Use and Share Information
We use the collected information to:
- Deliver and render the interactive spin-to-win game popup on your store.
- Register coupon codes at checkout and track analytics.
- Allow merchants to export collected subscriber emails, or sync them to third-party email platforms (like Klaviyo or Mailchimp) once configured by the merchant.
We do not sell, rent, or trade your personal data or your customers' data to anyone.
4. Data Security and Retention
All information is stored securely inside a modern cloud database (PostgreSQL) using state-of-the-art encryption protocols. We retain customer leads as long as the merchant maintains the app installation, or until a customer requests redaction/deletion.
5. GDPR Compliance & Privacy Rights
We respect the privacy rights of all users, including customers in the EEA (GDPR compliant). We actively listen to and process Shopify's mandatory compliance webhooks within 48 hours:
- Customer Deletion (Redact): Customers can request the deletion of their email or spin history records via the merchant's portal, which triggers our redaction mechanism.
- Customer Data Requests: Customers can request access to all data stored about them in our database.
- Shop Deletion (Redact): When a merchant uninstalls Spin Boost, all store settings, campaigns, and subscriber leads are scheduled for erasure within 48 hours.
If you have any questions or would like to submit a manual privacy request, please contact us at support@spin-boost.com.