Privacy Policy
Last updated: May 22, 2026
Data Controller
Dual Price ("we", "our", "us") operates the Dual Price Shopify app. This privacy policy explains how we collect, use, and protect your information when you install and use our app.
Contact: privacy@dual-price.app
What Data We Collect
When you install Dual Price on your Shopify store, we collect:
- Shop identifier — your shop's myshopify.com domain and shop ID, used to link settings to your store.
- OAuth session data — access tokens required for Shopify API communication (stored encrypted in our database).
- App configuration — tax rate, labels, colors, font size ratio, and display mode that you set via the dashboard. These are stored both in your shop's metafields and in our database as a fallback.
- Subscription status — whether you have an active billing agreement.
What We Do NOT Collect
- No customer personal data (names, emails, addresses)
- No order or transaction data
- No browsing behavior or analytics
- No payment information (handled entirely by Shopify)
How We Use Your Data
Your data is used exclusively to:
- Display dual prices (with/without tax) on your storefront
- Persist your configuration across page loads and sessions
- Verify subscription status for billing purposes
Data Storage and Retention
Data is stored in a SQLite database on our Fly.io server (hosted in the EU, region Frankfurt). We retain your data for as long as the app is installed on your store. Upon uninstall, we delete all your data within 24 hours via our uninstall webhook handler.
Data Sharing
We do not sell, trade, or share your data with third parties. The only external service we use is Fly.io for hosting (EU region).
Your Rights (GDPR)
Under GDPR, you have the right to:
- Access — request a copy of your data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Data portability — receive your data in a machine-readable format
Shopify automatically sends us GDPR compliance webhooks. When we receive a customers/redact or shop/redact webhook, we promptly delete all associated data. For any requests, contact us at the email above.
Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.