Privacy Policy — Jeanie for Shopify

Last updated: June 27, 2026

Jeanie ("Jeanie", "we", "us") provides a CRM and marketing platform for businesses. The Jeanie Shopify app (the "App") lets a merchant connect their Shopify store to their own Jeanie account so their store data appears in Jeanie. This policy explains what the App collects, how it is used, and the choices available to merchants and their customers. The sync is one-way: data flows from Shopify into the merchant's Jeanie account only. Jeanie never writes to, or modifies, the merchant's Shopify store.

1. Who is responsible for your data

For data the App imports from a Shopify store, the merchant (the Shopify store owner) is the data controller. Jeanie acts as a data processor, handling that data on the merchant's behalf and under their instructions. Questions about a specific store's data should be directed to that merchant; questions about Jeanie's processing can be sent to us at the contact below.

2. What the App accesses

With the merchant's authorization, the App reads the following from the connected Shopify store via Shopify's Admin API:

• Customers — name, email, phone, and address.
• Orders — order details, line items, amounts, status, timestamps, and the staff/sales-associate identifier where the store's plan exposes it.
• Store — shop name, domain, plan, and locations.

The App requests only read access. It does not access products for editing, payment-card data, or any ability to change the store.

3. How the data is used

Imported data is used solely to populate the merchant's own Jeanie account so they can view, segment, and message their customers, attribute sales to their team, and analyze their business. Jeanie does not sell merchant or customer data, does not share it with third parties for those parties' own purposes, and does not use it to advertise to the store's customers on Jeanie's behalf.

4. How the data is protected

• All data is transmitted over TLS (HTTPS).
• Shopify access tokens are encrypted at rest (AES-256-GCM).
• Incoming Shopify webhooks are verified by HMAC signature before processing.
• Access to merchant data is restricted to the merchant's own Jeanie account.

5. Data retention and deletion

Imported data is retained while the store is connected. The App honors Shopify's mandatory privacy webhooks:

• customers/redact — when a customer requests erasure, the App deletes that customer's Shopify-sourced orders and unlinks them from the store.
• shop/redact — about 48 hours after the App is uninstalled, the App deletes the store's imported orders and unlinks its customers.
• customers/data_request — the merchant is notified so they can fulfill a customer's data-access request.

A merchant can disconnect the store at any time from their Jeanie account or by uninstalling the App in Shopify, which stops all syncing and triggers deletion of imported store data as above.

6. Customers' rights

A store's customers may have rights under GDPR, CCPA, and similar laws — including access, correction, and deletion. Because the merchant controls this data, customers should contact the merchant (the store) to exercise these rights; Jeanie will act on the merchant's instruction and on Shopify's redaction requests.

7. Sub-processors

Jeanie uses reputable infrastructure providers (hosting, database, and messaging) to operate the service. These providers process data only to provide their services to Jeanie and under contractual confidentiality and security obligations.

8. Changes

We may update this policy. Material changes will be reflected by the "Last updated" date above.

9. Contact

Questions about this policy or Jeanie's data practices: privacy@usejeanie.com.