Privacy Policy for Digital Downloads

Last updated: March 13, 2026

1. What Information We Collect

To provide secure digital fulfillment services, we collect and process the following information:

A. Information from Shopify:

When you install the App, we automatically receive certain information from your Shopify store via the Shopify API to enable digital delivery:

Store Information: Your shop's domain (.myshopify.com URL), store name, and contact email.
API Access Token: An authorization token (OAuth) allowing our App to interact with your store to manage file permissions and fulfill orders.
Access to Store Data: The App requests permissions to access data scopes necessary for its core functions:
- Products & Variants (to link digital assets)
- Orders (to trigger fulfillment and link generation)
- Customers (to deliver links to the correct recipient)
- Files (to manage your digital asset library)

B. Information from Your Customers:

When a customer purchases a digital product, we process their order data to deliver the download links. This includes their email address and purchase history within your store.

C. Information We Store:

We store the following in our secure database to manage your account and protect your assets:

Session Data: Your shop domain and API access tokens (Session model).
Fulfillment Records: Order IDs, download keys, and permission settings (Order and DownloadPermission models).
App Plan: Your current subscription level and order usage counts (StoreConnection model).
Access Logs: Records of when and from which IP addresses your digital assets were accessed.

2. How We Use Your Information

We use the information we collect strictly to provide the App's services:

To Automate Fulfillment: Triggering download link delivery immediately after a purchase.
To Protect Assets: Generating unique, encrypted keys and enforcing download limits.
To Provide Support: Helping you manage your digital library and troubleshoot delivery issues.
To Enforce Billing: Tracking monthly order volume to ensure compliance with your selected plan.

We do not sell, rent, or share your store data or your customers' data with any third parties.

3. Data Retention and Deletion

We retain fulfillment records and download keys as long as the App is installed to ensure your customers can access their purchases. Upon uninstallation, we receive an app/uninstalled webhook and delete all data associated with your store within 48 hours.

4. Contact Us

If you have questions about this policy, contact us at:

Webwidely
contact@webwidely.com