Privacy policy

Who we are

SL Auto Add to Cart Free Gift is operated by Slurvo FZ-LLC in Ras Al Khaimah, United Arab Emirates. For merchant account information, Slurvo is the service provider. For shopper information processed on behalf of a merchant, the merchant remains the controller and Slurvo acts as its processor.

Information we process

• Shopify shop details such as store name, domain, contact email, currency, timezone, plan, installation state, and granted scopes.
• App configuration including rules, selected products and variants, design settings, translations, notification settings, and billing entitlement.
• Shopify authentication session information needed to keep the app secure, which can include authorized staff identifiers and account profile fields supplied by Shopify.
• For attributed analytics only: a Shopify order identifier, order total, currency, time received, and the rule that supplied a verified free gift. We do not store shopper names, addresses, payment details, or full order contents for analytics.
• Support details a merchant chooses to send through live chat, including store context that helps us diagnose an issue.

How and why we use information

We process this information to authenticate merchants, publish and run gift rules, maintain billing entitlements, show accurate analytics, deliver requested alerts, prevent abuse, investigate errors, answer support requests, and comply with law. We do not sell personal information or use Shopify data for unrelated advertising.

Service providers and disclosures

Shopify supplies the platform and commerce APIs. Railway hosts the application and its PostgreSQL database. Crisp provides live chat when a merchant opens support. Resend sends operational alert emails only when the merchant enables them. These providers process data only to deliver their contracted services. We may also disclose information when required by law or to protect the app, merchants, or others from fraud or harm.

Retention and deletion

We retain configuration and attributed analytics while an installation is active and only as long as needed to operate and support the service. Uninstalling immediately disables the installation and removes Shopify sessions. Shopify privacy webhooks delete scoped order references on customer redaction and delete the remaining shop record, rules, settings, translations, analytics, and delivery records on shop redaction. Security backups expire on their normal rotation.

Your choices and rights

Merchants can change or delete app configuration in the app and can uninstall it in Shopify admin. A shopper should normally direct an access, correction, or deletion request to the Shopify merchant that controls the store. Merchants and authorized users can contact us to exercise applicable privacy rights or ask about cross-border processing.

Security and contact

We use access controls, encrypted network connections, signed webhooks, tenant isolation, and data minimization to protect the service. No system is perfectly secure. Send privacy questions to support@slurvo.com with the subject “SL privacy request”.