Wishly: Wishlist App Privacy Policy

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account through Shopify’s APIs, including (as applicable):

Information Collected from Store Buyers/Visitors

To provide the wishlist functionality, the App collects the following information from customers who use the wishlist features on your store:

• Guest Token: A unique identifier generated for guest shoppers to persist and retrieve their wishlist items locally or during their browser session.
• Email Address & Name: If a customer signs up or enters their details to save, sync, or share their wishlist.
• Shopify Customer ID: Used to link the wishlist to their customer account on your store if they are logged in.
• Wishlist Action Data: Interaction details, such as products/variants added, moved, viewed, or removed from wishlists, to power wishlist logs and settings.
• Share Tokens: Unique links generated when customers choose to share their wishlists with others.

Information Collected from Merchants

We collect personal information directly from you, through your Shopify account, when you contact us for technical or customer support, and by using the following technologies within the App’s admin interface:

• "Cookies": We use cookies and similar technologies in the App’s admin interface to maintain your session and keep you authenticated while you configure and manage the App.
• "Local Storage / Session Storage": Used on your storefront to remember guest customers' wishlist choices on their browsers.
• "Log files": We collect technical logs related to your use of the App. These logs may include details such as IP address, browser type, operating system, date/time stamps, and error or performance data. We use this information for security, debugging, and performance monitoring.

How Do We Use Your Personal Information?

We use the personal information that we collect from you and your customers to provide the Service and operate the App. Specifically, we use this information to:

• Authenticate merchants and allow access to configure the App.
• Allow customers to add, view, update, and remove products/variants from their wishlists.
• Allow customers to share their wishlist links with others.
• Synchronize wishlist events to third-party marketing platforms (such as Klaviyo or Omnisend) if enabled by you (the merchant), to trigger automated reminder emails or marketing campaigns.
• Verify billing and subscription status (for example, to confirm that your subscription plan is active).
• Monitor, maintain, and improve the App, including troubleshooting bugs and analyzing widget performance.
• Provide customer support and respond to inquiries.

We do not use your or your customers' personal information for targeted advertising or remarketing on our own behalf, and we do not sell or rent personal information to third parties.

Sharing Your Personal Information

We do not share personal information with third parties except as necessary to provide the Service or to comply with the law. For example, we may share information with:

• Third-Party Marketing Platforms: If you (the merchant) opt to integrate the App with platforms such as Klaviyo or Omnisend, customer wishlist data will be synced to those accounts under your direction.
• Trusted Service Providers: Services that host our database and infrastructure or provide IT support. These providers process personal information only on our behalf and under appropriate security safeguards.
• Government authorities, courts, or law enforcement: If we are required to do so to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request, or to protect our rights and safety.

Behavioural Advertising

The App does not use your or your customers' personal information for our own targeted advertising, behavioural profiling, or remarketing.

Your Rights

Depending on where you or your customers are located, you/they may have certain rights with respect to personal information, including the right to request access to, correction of, or deletion of the personal information that we hold.

If you are a European resident (including residents of the European Economic Area and the United Kingdom), you have rights under applicable data protection laws, including:

• The right to access personal information that we hold about you.
• The right to request that your personal information be corrected, updated, or deleted.
• The right to object to or restrict certain processing of your personal information.

If you or your customers would like to exercise these rights, please contact us using the contact information below. Regardless of your location, we respond to all requests in accordance with applicable data protection laws.

Additionally, if you are a European resident, we note that we process your information in order to fulfill contracts we might have with you (for example, when you install and use the App) or otherwise to pursue our legitimate business interests described above. Please note that your information will be transferred outside of Europe, including to Canada and the United States.

Data Retention and Deletion

• For Customers: Wishlist item logs, customer emails, guest tokens, and association data are retained as long as your store uses the App or until we receive a deletion request.
• For Merchants: We maintain your store’s configuration data, session settings, and related log data for as long as you use the App.
• Upon Uninstallation: When you uninstall the App, we delete associated store configurations and related App data from our databases within a reasonable time period, except where we are required to retain certain information for legal, accounting, or compliance purposes.
• Shopify Data Protection Webhooks: We fully support and process Shopify’s mandatory GDPR/privacy webhooks:
  • customers/data_request (Requesting customer data)
  • customers/redact (Redacting customer data)
  • shop/redact (Redacting shop data)

Cross-Border Transfers

We may store and process personal information in Canada, the United States, and other countries outside of your country of residence. These countries may have different data protection laws than those in your jurisdiction. Where required by law, we take steps to ensure that appropriate safeguards are in place to protect personal information when it is transferred internationally.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices, changes to the App, or for other operational, legal, or regulatory reasons. We will indicate the date of the latest revision at the top of this policy.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint or exercise your privacy rights, please contact us by e-mail at: