This Privacy Policy describes how Cubic Mesh ("we", "us", or "our") collects, uses, and protects information when you install and use the Cubic Carousel Shopify application ("the App").
1. Information We Access and Collect
A. Merchant & Store Information (Via Shopify Admin API)
When you install Cubic Carousel, Shopify provides our application with access to specific data through the Shopify API under the authorized permission scope:
- Scope:
read_products— Grants access only to catalog data necessary to construct recommendations. - Store Identifier: Your Shopify store primary domain and permanent myshopify domain (e.g.
your-store.myshopify.com). - Product Catalog Data: Product IDs, titles, handles, tags, product types, prices, inventory availability status, and product image URLs. This data is required solely to generate dynamic recommendations (such as related products, smart tag matching, and category carousels).
- App Configuration Settings: Your chosen widget styles, layout preferences, and content sequences configured within the Cubic Carousel Builder.
B. Storefront Shopper Data (Zero Personal Information)
- No Personally Identifiable Information (PII): We do not collect, store, or process shopper names, email addresses, phone numbers, billing/shipping addresses, payment details, or IP addresses.
- Anonymous Interaction Logs: When a visitor views or clicks a product card inside a carousel, the App logs an anonymous event counter (
productId,sourceProductId,eventType: view | click) solely to calculate aggregate conversion analytics for your merchant dashboard. These events are strictly anonymous and are never tied to individual shopper identities or personal tracking cookies.
2. How We Use the Information
We use the information accessed by the App exclusively to:
- Render and customize carousel widgets on your storefront according to your configuration.
- Deliver smart fallback product recommendations (e.g., Same Collection, Similar Tags, Recently Viewed).
- Provide merchants with aggregate analytics in the App dashboard (total impressions and click-through rates).
- Verify and manage your subscription plan and billing status through Shopify’s official Billing API.
3. Data Sharing and Third Parties
- No Data Selling: We do not sell, rent, monetize, or trade your store data or your customers' data to any third parties, advertisers, or data brokers.
- Subprocessors: Data is processed and hosted exclusively on secure cloud infrastructure providers solely for the operation and maintenance of the App.
4. Data Retention and Deletion
During Active Installation
Merchant settings, session tokens, and aggregate event metrics are retained for as long as the App remains installed on your store to provide uninterrupted carousel functionality.
Upon Uninstallation (48h Purge)
When you uninstall Cubic Carousel, Shopify immediately notifies our server via the app/uninstalled webhook. Within 48 hours, all store configuration records, session tokens, and associated tracking logs are permanently deleted from our databases.
5. Compliance with Privacy Regulations (GDPR, CCPA/CPRA, and Shopify Mandates)
Cubic Carousel fully complies with Shopify’s mandatory privacy compliance webhooks:
6. Security
We implement industry-standard technical and organizational security measures to protect the information processed by our App:
- All communications between Shopify, your storefront, and our application servers are encrypted in transit using TLS/HTTPS (SSL).
- Application sessions are secured using Shopify's official token-based authentication and strict Content Security Policies (CSP).
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our operational, legal, or regulatory requirements. Any updates will be posted directly to this page with an updated "Last Updated" date.
8. Contact Us
If you have questions or concerns regarding this Privacy Policy or your data, please contact us: