Privacy Policy
Last updated: 25 September 2026
ScaleWin Boost ("Boost", "the app") is a Shopify app made by ScaleWin ("we", "us"). It lets merchants run volume discounts, bundles, free gifts, buy-X-get-Y, returning-customer offers and a cart drawer, show shoppable reels and stories, answer shoppers with an AI support chat (with hand-over to the store's own team), and optionally receive a daily sales report. This policy explains what information the app accesses when a merchant installs it, how we use it, and how it is deleted.
1. Information we access
When you install Boost, Shopify gives the app access only to the permissions you approve:
| Permission | Why we need it |
|---|---|
| Products (read) | To let you pick products and collections for offers, and to show them in the storefront widgets. |
| Orders (read) | To suggest offers with AI setup (average order value, products bought together), and to calculate your dashboard and daily report figures. |
| Discounts (read & write) | To create the single automatic "ScaleWin Boost" discount that applies your offers at checkout. |
| Themes (read) | Only to check whether the Boost app embed is switched on in your live theme. |
| Files (read & write) | Reels you upload are stored in your own store's Shopify Files; the app keeps only references to them. |
| Online store pages and legal policies (read) | So the AI chat can answer from your About/FAQ pages and your shipping and refund policies. |
2. Information we store
- Store details: your shop domain, store name, currency, time zone and plan.
- An access token issued by Shopify, stored encrypted, so the app can act on your store.
- Your settings: offers, cart drawer texts and design choices, and your store theme's colours (read from the storefront so widgets match your look).
- Daily report settings (only if you turn reports on): the WhatsApp number you enter, the report hour, and — if you connect Google — your Google account email, an encrypted Google refresh token and the ID of the Google Sheet the app created.
- Reels: references to the videos in your Shopify Files, captions, labels, tagged products and where each reel shows.
- AI chat knowledge: short notes the AI writes from your product pages, store pages and policies, plus any questions, answers and instructions you add. You can view and edit them in the app.
- Your chat team: each team member's name and email, and a one-way hash of the password they choose for ScaleWin Desk (never the password itself).
- Aggregated sales figures (totals such as number of orders, sales, discount given, per-offer totals) for the dashboard and reports.
3. Customer data
For offers, the dashboard and reports, the app reads order amounts, the discounts applied, and whether a customer has ordered before. These are processed in memory and only aggregated numbers (for example "12 orders, 3 from returning customers") are saved.
AI support chat (only if you switch it on). The chat stores the messages a shopper and your team exchange, the page the shopper was on, and any name, phone number or email the shopper chooses to leave for your team. Chats are deleted automatically 90 days after the last message. When a shopper asks about an order, the app looks up that order's status in your store only if the email or phone number they give matches the order; the order details are shown in the chat but not stored separately. Chats are visible only to you and the team members you add.
On your storefront, the Boost widgets keep a few values in the shopper's browser storage (your theme colours, which cart suggestions were dismissed, which stories were watched, and — if the shopper uses the chat — a random chat ID so the conversation continues on the next page). It does not set tracking cookies and does not track shoppers across sites.
4. How we use information
- To run your offers, the cart drawer and the discount at checkout.
- To show your dashboard and send the daily report you asked for.
- To generate offer suggestions when you use AI setup.
- To answer shoppers in the AI chat and pass chats to your team when needed.
- To handle billing through Shopify and to provide support.
We do not sell data, use it for advertising, or share it with anyone except the service providers below, and only as needed to run the app.
5. Service providers
| Provider | Purpose |
|---|---|
| Shopify | App platform, discounts and billing. |
| Supabase | Hosting of the app's server and encrypted database. |
| Meta (WhatsApp Business Platform) | Delivers the daily report message to the number you entered (only if enabled). |
| Google (Sheets & Drive) | Writes the daily report to a sheet in your own Google account (only if you connect it). The app can only access files it created. |
| Anthropic | AI setup: writes offer titles and descriptions from store-level figures and product titles. AI chat: reads your product pages and policies to write the chat's notes, and answers shopper questions — the shopper's messages and the relevant notes are sent for each answer. Anthropic does not use this data to train its models. |
| Web push services (Google, Apple, Mozilla) | Wake your team's ScaleWin Desk to show a new-chat notification. The push itself carries no message content. |
6. Data retention and deletion
- When you uninstall Boost, the access token is revoked and the checkout discount stops.
- 48 hours after uninstall, Shopify sends a deletion request and we permanently delete all data for your store — offers, settings, report history and Google connection.
- You can disconnect Google or turn off reports at any time from the app; the stored Google token is deleted when you disconnect.
- Chats are deleted 90 days after their last message.
- When Shopify asks us to delete a customer's data, we delete every chat that contains their email or phone number. When Shopify forwards a customer's request for their data, the chats that contain their email or phone number appear in the app for you to download and send to the customer.
7. Security
All traffic uses HTTPS. Access tokens and Google tokens are encrypted at rest; team passwords are stored only as salted hashes. Admin requests are authenticated with Shopify session tokens, and webhooks are verified with Shopify's signature.
8. Your rights
You can ask us to access, correct or delete the data we hold about your store at any time by emailing us. If you are in the EEA, UK or a region with similar laws, you also have the right to complain to your local data protection authority.
9. Changes
If we change this policy we will update the date above. Material changes will also be shown in the app.
10. Contact
ScaleWin · Delhi, India
Email: [email protected]