Offerwren privacy policy

Last updated October 11, 2026. Operator: Basharat Ali / PakisTech. Contact: basharatoffice8@gmail.com.

What the app processes

Offerwren reads the merchant's products, variants, inventory and store currency, configured offer rules, and Shopify subscription status. Encrypted Shopify authorization sessions are stored so the app can provide its service. For a post-purchase offer, it processes a signed purchase reference, purchased product identifiers, currency and subtotal. It stores a checkout-session record, selected offer, timestamps, signing information and a client-reported processing result to enforce usage limits and prevent repeated processing. The app does not request buyer names, emails, phone numbers or addresses for selecting offers, and it does not collect card numbers or payment credentials.

Why and how data is used

Data is used to select eligible complementary products, exclude products already purchased, validate availability, present an additional total, process the buyer's explicit choice, enforce the merchant's app plan and maintain service security. Shopify handles payment and the resulting order. A client-reported result is not treated as verified revenue. The app does not sell customer data, use it for advertising, or make decisions with legal or similarly significant effects.

Service providers and security

Shopify supplies store APIs, authentication, app billing and checkout. Cloudflare provides hosting and database storage. Data is transmitted over HTTPS; the database is encrypted at rest and Shopify credentials receive additional application encryption. Access is limited by authenticated merchant context and store isolation. Processing can take place outside your country. The merchant data-processing terms describe commitments concerning subprocessors, security and required transfer safeguards.

Retention and your choices

Checkout-session records are removed after 40 days plus at most one hourly cleanup interval. Expired signed changeset payloads are removed during hourly cleanup. Offer settings, encrypted authorization sessions and terms acceptance remain while the app is installed. Uninstall or Shopify's shop-erasure notification deletes the store's app records. Existing Shopify orders remain in Shopify. Buyers can skip the offer without an additional charge. Merchants can pause offers at any time.

Access, deletion and support

Contact the operator for access, correction or deletion assistance. Buyers should identify the merchant where they placed their order; the operator will work with the merchant to verify and handle the request. Shopify privacy notifications are verified before processing. Customer-erasure requests unlink retained checkout references and signing records across that store, retaining anonymous usage counts. New offers are briefly suppressed to prevent replay of a recently erased checkout. Access requests appear in the merchant dashboard for verified handling within 30 days; the merchant can download a private store report and identify relevant checkout records with support. The app cannot directly match Shopify customer or order IDs to opaque checkout references, so the report must not be forwarded wholesale to a buyer. Incoming buyer contact details are not copied from these notifications. Request identifiers remain while unresolved and are deleted 40 days after completion, or on uninstall. App usage totals are visible in the merchant dashboard. Do not email payment-card details or unrelated sensitive information. Contact records supplied directly for support are used only to handle that request.