Privacy Policy

Last updated: July 4, 2026

TriSend ("we", "us", "our") operates the TriSend application available through the Shopify App Store. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you install and use our application.

1. Information We Collect

When you install TriSend, we collect the following information from your Shopify store:

• Store information: Shop domain, store name, email address, and billing details.
• Customer data: Customer names, email addresses, phone numbers, order history, and tags as authorized by your granted API scopes.
• Order data: Order details for revenue attribution and analytics.
• Product data: Product catalog information for recommendation features.
• Usage data: Campaign sends, open rates, click rates, and conversion metrics.

2. How We Use Your Information

• To provide email, SMS, and WhatsApp marketing services on your behalf.
• To build audience segments and automate marketing workflows.
• To generate analytics, attribution reports, and performance metrics.
• To manage your subscription and billing through Shopify's Billing API.
• To send transactional communications related to your account.

3. Third-Party Service Providers

We use the following third-party providers to deliver our services:

• Amazon Web Services (AWS SES): Email delivery infrastructure. Emails are sent through our SES account on your behalf.
• Twilio: SMS delivery infrastructure. SMS messages are sent through our Twilio account on your behalf.
• Meta Business API: WhatsApp messaging. Merchants on Growth plans and above connect their own Meta Business account (BYOA model). We do not store WhatsApp message content.
• Hetzner: Server infrastructure hosted in the EU (Germany).
• ClickHouse Cloud: Analytics event storage for campaign performance metrics.

4. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on our secure infrastructure in Germany (Hetzner). Analytics event data is stored in ClickHouse Cloud. All data is transmitted over HTTPS (TLS 1.2+). We implement industry-standard security measures including encrypted connections, access controls, and regular security updates.

5. Data Retention

• Account data: Retained while your app is installed. Deleted within 30 days of uninstallation via Shopify's mandatory shop/redact webhook.
• Campaign analytics: Retained for 24 months for reporting purposes, then automatically purged.
• Customer data: Deleted upon receiving a customer data erasure request (customers/redact webhook) or upon app uninstallation.
• Session data: Cleared immediately upon app uninstallation.

6. GDPR & CCPA Compliance

We comply with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We act as a data processor on behalf of merchants (data controllers). For details on your rights and our compliance measures, see our GDPR Compliance page.

7. Shopify Mandatory Webhooks

We fully implement Shopify's mandatory compliance webhooks:

• Customer Data Request: When a customer requests their data, we compile and export all stored data for that customer.
• Customer Data Erasure: When a customer requests deletion, we erase all personal data associated with that customer.
• Shop Data Erasure: When a merchant uninstalls the app, we delete all shop data, customer records, campaigns, and analytics within 30 days.

8. Your Rights

You have the right to:

• Access the personal data we hold about your customers.
• Request correction of inaccurate data.
• Request deletion of your data (processed via Shopify's compliance webhooks).
• Export your data at any time through the app's analytics export feature.
• Withdraw consent by uninstalling the app.

9. Cookies

TriSend does not use tracking cookies. As an embedded Shopify app, authentication is handled by Shopify's session tokens. Our landing page does not set any cookies.

10. Children's Privacy

TriSend is a business-to-business service and is not directed at individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at privacy@trisend.app.