Shopify Apps Privacy Policy - Concord Technosoft

Last updated: 15 Oct 2026

This policy explains how Concord Technosoft Private Limited (“we”, “us”, “our”) handles information in the apps we publish on the Shopify App Store. It covers merchants who install our apps and, where relevant, the shoppers who use those merchants’ stores. For our website and our other products, see our general Privacy Policy. Where this page and the general policy differ, this page governs our Shopify apps.

Our role

When a merchant installs one of our apps, the merchant is in charge of their store’s data and we process it only to run the app they installed. In data-protection terms we are a processor (service provider) for store and shopper data, and we are the controller only for the merchant’s own account and billing details.

Our Shopify apps

This page lists each app and exactly what it accesses. We add a section here whenever we publish a new Shopify app.

Concord Payment Rules

Hides payment methods at checkout by delivery country and cart value.

Information we receive from your store

Store details: your myshopify.com domain, store name, store contact email, Shopify plan, and store currency.
Your rules: the payment methods, countries and cart limits you configure in the app.
Payment method names: the names of the payment methods available on your store, so you can choose which to hide.
Access credentials: the access token Shopify issues to the app. We store it encrypted and never show it in full in logs.
Billing status: whether you have approved a charge, and the plan and price you were offered. Payment itself is handled entirely by Shopify; we never see card details.

What happens at checkout

When a shopper reaches the payment step, a Shopify Function running on Shopify’s infrastructure reads the delivery country, the cart value and the list of payment methods, and decides which methods to hide. This runs inside Shopify. We do not receive, copy or store the shopper’s name, email, address, phone number or order details. The app does not read orders or customer records.

Why we use it

To apply your rules at checkout and show you their status.
To work out the correct price for your Shopify plan and to manage your subscription and free period.
To send you service emails about your subscription, such as a plan change or the end of the free period, at your store contact email.
To keep the app secure, fix errors and respond to support requests.

We do not sell data, use it for advertising, or use it to train models.

Free period records

The 7-day free period is offered once per store. To enforce this we keep a minimal record of the store domain, the date of first installation and whether the free period was used. This record is kept after uninstall so that reinstalling does not restart the free period. It contains no shopper data and no contact details.

How long we keep it

While the app is installed: store details, rules and credentials, so the app can work.
After uninstall: the access token is deleted and the app stops working for the store. Shopify then sends us a store erasure request about 48 hours after uninstall, and we delete your store details and rules at that point.
Free period record: kept as described above.
Server logs: short-lived, used only for troubleshooting.
Shopper data: none is stored. If Shopify forwards a shopper data request or erasure request to us, we confirm that we hold no shopper data for that store.

Who else handles your data

Shopify — the platform your store runs on and the provider of billing and checkout. Its own privacy policy applies to its handling of data.
Our hosting provider — hosts the app and its database in India.
An exchange-rate service — we request public currency rates so cart limits work across currencies. No personal data is sent.
Our email provider — delivers the service emails described above.

Everyone on this list is bound to keep your information confidential and use it only for the service they provide to us. We may disclose information where the law requires it.

How we protect it

Data in transit is encrypted with TLS. Access tokens are encrypted at rest. Requests from Shopify are verified before we act on them, and access to the database is limited to staff who need it. No system is perfectly secure; if a breach is likely to affect you, we will tell you and the relevant authority as the law requires.

Your rights

You can ask us to tell you what we hold about your store, correct it, or delete it. Uninstalling the app starts deletion as described above, or you can write to us and we will act sooner. Where you are in the EEA or UK you also have the right to object to certain processing, to receive a portable copy of your data and to complain to your supervisory authority.

Shoppers who have questions about their data should contact the store they bought from, since the store is in charge of that data. We will help the store respond.

Contact: [email protected]

Grievance officer

Abhishek
Grievance Officer, Concord Technosoft Private Limited
[email protected]
T-11, 37-38 Central Market, Ashok Vihar, Phase-I, Delhi 110052, India

Where your data is held

The app and its database are hosted in India. Shopify and some of the services above process data outside India. Where that happens, we take reasonable steps to keep your information protected to the standard described here.

Changes to this policy

We may update this policy as our apps or the law change. The date at the top shows the latest revision. If a change materially affects how we handle your information, we will say so plainly and notify merchants by email.