Privacy Policy

1. Scope

This policy explains how HappifyApps handles personal data across this website, sales and support conversations, professional services, and our Shopify apps. It also explains the choices available to visitors, merchants, and individuals whose data a merchant processes through an app.

2. Who is responsible

Udaan Technologies Pvt. Ltd. operates HappifyApps and is responsible for personal data collected through this website, sales, and support interactions. For data a merchant makes available through a HappifyApps Shopify app, the merchant is generally the controller or data fiduciary and we act as its processor or data processor.

Contact: privacy@happifyapps.com, Plot-10, Shakti Khand - 3, Indirapuram, Ghaziabad, Uttar Pradesh 201014, India.

3. Data we collect

• Website and device data: pages viewed, approximate location derived from IP address, browser, device, referral source, and and interaction data. Google Analytics collects interaction data only if you accept it; separate cookieless page-view counting (below) does not need your consent.
• Inquiry and audit data: name, work email, company, phone or WhatsApp number when supplied, store URL, project details, budget, timeline, audit answers, and consent records.
• Launch-notification data: when you ask us to tell you when an app or theme launches, we store your email, the product you chose, the time you gave consent, the version of the consent wording you agreed to, and, while we keep the request, when we notified you or when you unsubscribed. We do not store your name or IP address with the request; the IP address is used only for rate limits and security logs.
• Commercial data: order, subscription, billing status, licence, support, and transaction references.
• Website checkout data: when you buy a store kit or service on this website, we collect your name, email address and, if you supply it, phone number, and send them with the order amount to Razorpay, our payment processor in India. You enter card, UPI or bank details in Razorpay’s checkout window; Razorpay processes them and we do not receive or store them. We keep the Razorpay order and payment ids, amount, currency, status, the email and phone Razorpay returns, and any refund. Shopify app charges are billed by Shopify, not Razorpay.
• App-page funnel events: if you accept analytics, our app pages send a page view, “Install on Shopify” click or beta click to our own server with the app, the event type and a random per-tab id (happify-marketing-session). We use these to count how each app page performs; they are not linked to your name or email.
• Account and support data: account identifiers, authorised users, communications, diagnostic information, and security events.
• Shopify app data: only store resources allowed by the scopes approved during installation and needed by the installed app.

4. Why we use data

• Provide requested products and services: perform a contract or take requested pre-contract steps.
• Reply to inquiries and deliver requested audits: take requested pre-contract steps and pursue the legitimate interest of responding to business inquiries.
• Operate, secure, diagnose, and improve services: contractual necessity, legal obligations, and legitimate interests in reliable and secure services.
• Billing, tax, fraud prevention, and legal requests: contractual necessity and legal obligations.
• Google Analytics: consent. It is disabled unless accepted and can be withdrawn through Cookie settings.
• App-page funnel events: consent, given through the same analytics choice. They stop when you choose “Essential only” in Cookie settings.
• Cookieless page-view counting: our legitimate interest in knowing which pages of our website, admin console and apps are used. It sets no cookies and stores no identifier on your device.
• Launch-notification emails: consent, given by ticking the consent box on an app or theme page. We use the email only to tell you about the launch of the product you chose, and every launch email has an unsubscribe link.
• Early-access and promotional messages: consent or another lawful basis expressly permitted in the recipient’s jurisdiction. Every promotional message must provide an opt-out.

5. Shopify app processing

Each app requests only the Shopify access scopes needed for its documented features. We use merchant and customer data only to provide, secure, support, and improve the installed app, and not for unrelated advertising or sale.

• Reorder Predictions: products, variants, inventory, order line items, order dates and totals, Shopify customer ID, first and last name, and email for repeat-purchase analysis. It does not request or store customer phone numbers or addresses.
• Dead Stock Rescue: products, variants, inventory, locations, unit costs, and order line items, dates and quantities for inventory analysis. It does not request or store customer names, emails, phone numbers, or addresses; customers are kept as a Shopify ID only.
• Other apps: each app’s privacy page (linked from its page under Apps) lists the permissions it requests, what it stores, and who else receives data.

All HappifyApps apps share one database and keep one copy of a store’s data, not one per app. Order imports keep buyer contact details (name, email, phone, addresses) only while an app on that store needs them, such as Local Delivery Sheet or Invoice & Packing Slip; otherwise orders are stored without them.

Our apps do not make solely automated decisions with legal or similarly significant effects. Merchant-created segments and recommendations remain subject to merchant review.

6. Sharing and sub-processors

We do not sell personal data. We share data only with service providers needed to operate the service, a merchant’s connected provider, professional advisers under confidentiality, authorities where legally required, or a successor in a properly managed business transaction.

Current providers and their roles are listed on the Sub-processors page, including Razorpay (website checkout payments), Resend (transactional email), Google Gemini (Store Builder AI drafting, only when a merchant uses it) and Hetzner (hosting for our self-hosted Plausible page-view counting). Klaviyo receives data only when a Reorder Predictions merchant connects its own Klaviyo account and directs the transfer.

7. International transfers

Providers and users may be located outside the country where data originated. Where required, we rely on adequacy decisions, approved contractual protections, provider data-processing terms, or another lawful transfer mechanism. Contact us for the transfer mechanism relevant to a specific service.

8. Retention and deletion

• Store data synced from Shopify is kept while an app is installed; order and inventory history is what the analysis uses.
• When an app is uninstalled, its data for that store is deleted when Shopify’s shop redaction request arrives, 48 hours later. Data shared with another HappifyApps app still installed on the store is kept for that app and deleted with the last app’s redaction.
• Shopify customer and shop redaction requests are processed through the mandatory privacy webhooks. A customer redaction removes that customer’s contact details from customer records, orders, delivery run stops, proof of delivery, stored webhook records and email-recipient log entries.
• Webhook delivery records are deleted after 30 days, app audit log entries after one year (except saved settings versions, kept while the app is installed), and encrypted database backups 90 days after they are taken.
• Inquiry, contract, billing, support, and security records are retained only while needed for the stated purpose, dispute handling, fraud prevention, or applicable accounting and legal duties, then deleted or de-identified.
• Launch-notification requests are kept until we send the launch email for the product you chose, or until you ask us to delete them, whichever comes first. We use them only to send that launch email. If you unsubscribe, we keep the request only to remember that you opted out, so we never email you about that product; you can still ask us to delete it at any time at privacy@happifyapps.com.
• Consent records are retained as needed to demonstrate and honour the visitor’s choice.

9. Your choices and rights

Depending on applicable law, you may request access, correction, completion, deletion, restriction, portability, withdrawal of consent, objection to certain processing, information about sharing, and review of a grievance. You may also complain to the competent privacy or consumer authority.

Send a request to privacy@happifyapps.com. Describe the relationship, store, app, or inquiry involved and the right you want to exercise. We may verify identity and authority before disclosing or deleting data. If a Shopify merchant controls the data, we may direct the request to that merchant or help the merchant respond. Withdrawing consent does not affect earlier lawful processing.

To stop launch-notification emails, use the unsubscribe link in any launch email, or email privacy@happifyapps.com. The link opens a page with an Unsubscribe button, and it works only for the email that received it.

10. Cookies and analytics

Essential storage remembers the visitor’s privacy choice, and functional storage remembers a selected theme preset and free website planner answers in your browser. Google Analytics is loaded only after opt-in, and app-page funnel events are sent only after the same opt-in. Razorpay can set its own cookies and storage in its checkout window when you start a payment. Separately, we count page views with Plausible Analytics, which we host ourselves on a server in Germany. It sets no cookies and stores no identifier on your device: it uses the page address plus your IP address and browser details, hashed into a visitor id that changes daily, and the hash inputs are not stored. It runs whether or not you accept Google Analytics. See the Sub-processors page for details. The complete inventory, duration, and preference control are on the Cookie Policy.

11. Security, children, and updates

Security measures and incident handling are described on our Security & Data Protection page. Our business services are not directed to children, and we do not knowingly solicit personal data from children through this website.

We may update this policy when products, providers, or law change. Material changes will be highlighted through an appropriate website or service notice and the effective date will be updated.

12. Grievances and data-processing terms

Consumer and privacy complaints can use our grievance process. Merchants can review the Data Processing Terms or request a signed DPA at privacy@happifyapps.com.