Privacy Policy for “Buy Now Later” Shopify App

Effective Date: July 15, 2026

At “Buy Now Later” (referred to as “we”, “our”, or “the App”), we respect your privacy. This Privacy Policy explains what information we collect from Shopify Merchants and their Customers, how we use it, and how we keep it safe.

1. Information We Collect

A. From Shopify Merchants (Store Owners):

When you install the App, we automatically access certain information from your Shopify store using Shopify’s APIs:

• Store Details: Shop name, shop email address, and Shopify domain (e.g., storename.myshopify.com).
• App Settings: Any configurations you set inside the app, such as deposit percentages, hold durations, and button styles.

B. From Customers (Shoppers):

We collect information directly from your customers when they use the App on your storefront (e.g., reserving a product, setting a reminder, or subscribing to discount alerts):

• Contact Information: Email address and customer name.
• Reservation Details: Product title, variant ID, and product price.
• Order Details: Shopify order IDs and timestamps associated with the deposit and remaining balance payments.

2. Why We Collect This Information (How We Use It)

We use the collected information solely to provide and improve our services:

• To Create Bookings: To generate Shopify Draft Orders for deposit and remaining balance checkouts.
• To Send Emails: To send transactional reminder emails to customers when their hold is about to expire, or to send alerts when a product price drops.
• To Sync Statuses: To automatically update payment statuses (Pending, Partial Paid, Full Paid) in the Merchant Dashboard when orders are paid on Shopify.
• To Provide Support: To debug issues and answer support queries.

3. Data Sharing

We never sell, trade, or rent Merchant or Customer data to third parties. We only share information with trusted third-party services necessary to run the App:

• Shopify: To process draft orders, checkouts, and webhooks.
• Email Service Provider (Brevo): To deliver transaction emails and reminders securely.

4. Data Retention and Deletion (GDPR Compliance)

We keep data only as long as necessary to provide the App’s services.

• When you uninstall the App: We automatically remove your shop access tokens immediately.
• GDPR Requests: We fully support Shopify’s GDPR webhooks. If a merchant or customer requests data deletion (Redact), we automatically purge all associated bookings, reminders, subscribers, and settings from our database within 48 hours.

5. Security

We take reasonable security measures to protect your data. All communications between the Shopify storefront, the App backend, and Shopify’s APIs are encrypted using HTTPS (SSL).

6. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify merchants inside the App dashboard or via email.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: buynowlater@cannyapps.com
• Website: https://cannyapps.com