TierfyTierfyBulk Discount & Tiered Pricing
Privacy

Privacy Policy

This Privacy Policy explains what data Tierfy collects from Shopify merchants who install the app, how we use it, and the choices you have about it.

Last updated: April 19, 2026

Who we are

Tierfy (“Tierfy”, “we”, “our”, “us”) is a Shopify app operated by ZXC Labs. The app helps Shopify merchants configure bulk discounts and tiered pricing, and ships a storefront widget that displays those tiers on product pages. This policy applies to data processed through the Tierfy app.

Scope

This policy covers data Tierfy processes when a Shopify merchant installs the app from the Shopify App Store and uses it inside their Shopify admin, plus minimal data generated by the storefront widget on shoppers' product pages. It does not cover data collected independently by Shopify, your theme, or third‑party apps on your store.

Data we collect

We collect only what's needed to run the app.

1. Shop & merchant account data

When you install Tierfy, Shopify provides us (via OAuth) with the shop domain, shop name, contact email, currency, IANA timezone, country code, primary domain, plus information about the installing user (first name, last name, email, locale, and whether they are the account owner). We store this to run the app, display context in the admin, and contact the right person about billing or incidents.

2. App configuration you create

Pricing rules, quantity tiers, targeting (product / variant / collection IDs), schedules, Design Studio HTML / CSS / JS, the selector you use to mount the widget, and your billing plan.

3. Product & catalog metadata

Using the write_products scope, Tierfy reads product, variant and collection identifiers and titles when you build a rule or run a bulk import. We store the IDs needed to evaluate rules; we do not copy your full product catalog.

4. Order metadata for analytics

Using the read_orders scope and the orders/create webhook, Tierfy records, per order: the Shopify order ID, order name, subtotal, total discounts, the list of discount titles applied (so we can detect which of them were ours), and line‑item quantity / price / discount allocations for lines that a Tierfy rule discounted. We use this to compute analytics, per‑rule performance, and monthly usage against your plan limits. We do not store customer names, customer emails, billing / shipping addresses, phone numbers, payment details or any other customer PII.

5. Discount & subscription events

Via the app_subscriptions/update webhook, we record changes to your Tierfy billing plan so that the app enforces the correct limits and storefront state.

6. Support interactions

If you use the in‑app chat, messages and your email / display name are processed by our support provider (see Sub‑processors).

7. Minimal technical data

Standard server logs (IP address, user agent, timestamps, request path) are generated for error diagnosis, rate‑limiting and security. These logs are rotated on a short schedule and are not joined to shop or shopper identities for marketing.

How we use data

  • Operate the service: create and apply discount rules at checkout, render the storefront widget, keep sessions authenticated.
  • Enforce plan limits: count app‑driven orders and revenue so we can bill correctly and pause when a plan cap is reached.
  • Analytics in your admin: show your own usage, AOV lift and rule performance inside the Tierfy dashboard.
  • Support: answer questions you raise through chat or email.
  • Legal and safety: prevent abuse, debug incidents, comply with lawful requests.

We do not sell your data. We do not use shop or order data to train generalised machine‑learning models, and we do not share it with advertising networks.

Sub‑processors

Tierfy relies on a small number of sub‑processors to deliver the service:

  • Shopify Inc.: platform host; OAuth, Admin API, webhooks, Discount Functions, app billing.
  • Our hosting and database provider: runs the Tierfy web application and its MySQL database in a dedicated, access‑controlled environment.
  • Crisp: powers the in‑app support chat. Only the identifiers we explicitly pass (shop domain, installer email, display name, plan) plus the messages you send are processed.
  • SMTP email provider: used to send transactional emails (e.g. install notifications). Processes recipient address and message content only.

Each sub‑processor is bound by a data‑processing agreement and only processes data on our instructions. We update this list as the stack evolves.

Data sharing

We share data only with the sub‑processors listed above, or where required by law (e.g. lawful orders from a competent authority). We do not sell, rent or disclose merchant data to advertisers or data brokers.

Retention & deletion

We retain your configuration and analytics data for as long as the app is installed on your store. When you uninstall Tierfy:

  • Your OAuth session is revoked immediately and our Discount Function stops applying at checkout.
  • Your configuration, pricing rules and aggregated analytics are retained for up to 30 days so that you can reinstall without losing work.
  • After 30 days the shop's data is deleted from our production database, except where we're required to retain it for legal, accounting or fraud‑prevention reasons (in which case the minimum data needed is kept for the required period and then deleted).
  • Server logs are rotated and permanently deleted within a short window (typically 14 days).

You can request earlier deletion at any time; see Your rights.

Security

All traffic between Shopify, your browser and Tierfy runs over HTTPS with modern TLS. OAuth access tokens and secrets are stored in an encrypted database, access to the production environment is restricted to named engineering staff with MFA, and admin actions are logged. We patch dependencies on a regular cadence and monitor for abuse. No system is perfectly secure, but we treat shop credentials and order data with the seriousness they deserve.

Your rights

Depending on where you are based (e.g. EEA, UK, California), you may have the right to access, correct, export or delete personal data we hold about you, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us using the details in Contact. We respond within 30 days.

Because Tierfy primarily processes merchant and order metadata (not shopper PII), most requests concern the shop and installer record. Where you are a shopper of a Tierfy‑using merchant, the merchant is the data controller for your personal data; we recommend contacting them first.

Cookies & tracking

The Tierfy admin sets a small number of first‑party session cookies required for authentication inside Shopify admin. The public marketing site (Tierfy homepage) uses no advertising or analytics trackers by default. The storefront widget renders inside your theme and does not set its own tracking cookies.

Children's data

Tierfy is a B2B tool for Shopify merchants. It is not directed at children and we do not knowingly collect personal information from anyone under 13 (or the applicable age of digital consent in your jurisdiction).

Changes to this policy

We may update this policy from time to time, for example to reflect new features or sub‑processors. Material changes will be announced in the app. The “Last updated” date at the top always reflects the current version.

Contact

Questions, requests or complaints about this policy? The fastest route is the in‑app chat inside the Tierfy admin. You can also reach us at:

ZXC Labs · Tierfy
Website: tierfy.zxclabs.com
Email: support@zxclabs.com