Skip to content

DealRotator Privacy Policy

Last updated: April 20, 2026

1. Introduction

This Privacy Policy applies to the DealRotator Shopify application, developed and operated by EcomHub ("we", "us", "our"). DealRotator automates rotating discount campaigns on your Shopify store by scheduling percentage discounts against targeted collections, product types, and tags.

This policy explains what data we access, how we use it, and how we protect it.

2. Information We Access from Shopify

When you install DealRotator, we access the following through the Shopify API:

  • Store name and domain
  • Product listings, product types, and tags
  • Collections you have created in your store
  • Automatic discount configurations we create on your behalf

We request the following Shopify API scopes: read_product_listings, read_products, write_discounts, and write_products.

3. Information You Provide

  • Rotation campaign configuration (targeting criteria, discount percentage, interval, number of products)
  • Product exclusion rules
  • Schedule and timing preferences

4. Customer Data

DealRotator does not collect, store, or process any customer personal information, orders, or payment data. The app operates purely on product and discount data within your store.

5. How We Use Your Information

  • Select products that match your targeting criteria for each rotation
  • Create and update Shopify automatic discounts on schedule
  • Display rotation history and campaign status in the app dashboard
  • Apply exclusion rules so specified products are never discounted
  • Calculate billing for your DealRotator subscription

6. Data Sharing

We share your data only with:

  • Shopify — product, collection, and discount updates via the Shopify API

We do not share your data with any other third parties, advertisers, or data brokers.

7. Data Storage and Security

Your rotation configurations are stored on our servers and are only used to communicate with the Shopify API on your behalf. All data transmission uses HTTPS encryption. Session credentials for Shopify API access are stored securely using Shopify's standard session storage pattern.

8. Data Retention

  • Merchant configuration — retained while the app is installed; deleted within 30 days of uninstall
  • Rotation history — retained for up to 12 months for reporting purposes
  • Session data — deleted immediately when you uninstall the app

9. Shopify Data Compliance

DealRotator complies with Shopify's API Terms of Service. We handle the following mandatory compliance webhooks:

  • Customer data request — DealRotator does not store customer data, so no data is returned
  • Customer data erasure — no customer data is stored to erase
  • Shop data erasure — all store configuration and history is deleted when the app is uninstalled

10. Your Rights

You have the right to:

  • Access the data we hold about you and your store
  • Request correction of inaccurate data
  • Request deletion of your data
  • Uninstall the app at any time to stop all data processing

To exercise any of these rights, contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of significant changes via email or through the DealRotator app dashboard.

12. Contact

If you have any questions about this Privacy Policy: