Tofo Perks: Privacy policy

Last updated: 3 November 2026

Tofo Perks (“the App”) is provided by Tofoapp to Shopify merchants. This policy explains what the App collects when a merchant installs it, and how that data is used.

What we collect

• Merchant data: store domain, app settings (partner company name, email domains, discount settings, product selections), and an access token issued by Shopify.
• Customer data, processed for the merchant:
  • the Shopify customer ID
  • the work email address, if the customer verifies one through the App, or their account email if it matches an approved company domain
  • verification records (when a link was requested or used); links are stored only as one-way hashes
  • an activity log of perk changes, with emails partly hidden

We don't collect payment details, addresses or phone numbers.

How we use it

Only to decide whether a customer gets the merchant's employee perks, and to show the merchant who has access. We never use it for marketing.

Sharing

We don't sell or share personal data. It's processed only by our hosting provider and our email provider, which sends verification emails, to run the App.

Retention and deletion

• Customer data is deleted when Shopify sends a customer redaction request.
• All store data is deleted 48 hours after the app is uninstalled, when Shopify sends a shop redaction request.
• Unused verification links are deleted after 7 days.

Your rights

Customers can ask the merchant for access to, or deletion of, their data. Merchants can contact us at [email protected].

Contact

Tofoapp, [email protected]