Monster Apps Privacy Policy

This policy explains what information our Shopify apps, Monster Cart and Ship Protect, use, why we use it, and how we look after it.

In this policy, "we" means Monster Apps Ltd, "you" means the store owner who installs our apps, and "shoppers" means the people who visit or buy from your store.

• We only use the information our apps need to work.
• We don't collect your shoppers' names, email addresses, phone numbers, home addresses or payment details.
• We don't sell anyone's information, and we don't use it for advertising.
• When you uninstall, we delete your store's data.
• You can contact us any time at support@monsterapps.shop.

Monster Apps Ltd is a company registered in England and Wales (No. 12642118) at 24-26 Arcadia Avenue, London N3 2JU, United Kingdom. "monsterapps" is our brand. Our apps include Monster Cart (listed on the Shopify App Store as "Monster Cart Upsell+ Free Gift") and Ship Protect.

For your own account information, we decide how it's used. For shopper information that passes through our apps, we only use it to run the app for you, on your behalf. In legal terms, you're the "controller" of your shoppers' information and we're your "processor".

• Your store name, web address and Shopify plan
• Your email address and contact details, so we can support you and send account updates
• Your app settings, such as campaigns, offers, design and protection settings
• Whether you're on a free or paid plan. Shopify handles billing, so we never see your card details.
• Anything you send to our support team

To make offers and shipping protection work in the cart, and to show you how they're performing, we use:

• What's in the cart: the products, quantities and prices
• Which offers, free gifts and progress-bar goals were shown and accepted, and which discounts were applied
• Which version of a campaign a shopper saw, if you're running an A/B test
• Order details from Shopify: order number, products, prices, discounts and totals, but not who placed the order
• Whether shipping protection or another add-on was in the order

Shopify keeps the following, and our apps don't collect or store it:

• Shoppers' names, email addresses and phone numbers
• Shoppers' shipping and billing addresses
• Shoppers' IP addresses
• Payment card details or other payment information
• Shopper account logins and passwords
• Your payouts, financial reports and Shopify Payments information
• Your staff accounts
• Shoppers' marketing preferences and subscriber lists

Some of Shopify's order notifications include shopper details. We throw those details away as soon as the notification arrives and never save them.

When you install one of our apps, Shopify asks you to approve what it can access. We only use that access for the reasons below.

Monster Cart

• Products and stock: to show products, free gifts and upsells in the cart, and check stock before offering a gift
• Discounts: to create the automatic discounts that power your campaigns
• Orders: to measure how your campaigns perform, to bill by order volume, and to tidy up our own tracking details on an order after it's placed
• Your theme: to check the Monster Cart cart is switched on in your theme, and help you turn it on
• Markets and languages: to show prices and text in the right currency and language
• Storefront product listings: to load product details in the cart

Ship Protect

• Products: to create and manage the shipping protection product
• Cart and orders: to add the optional protection fee to an order
• Checkout rules: to block fraudulent orders that contain only the protection product

Our apps don't use cookies to track shoppers. Monster Cart uses temporary browser storage that is cleared when the shopper closes the tab. It remembers things like which offers a shopper has already seen during that visit, so they don't see the same one twice. Nothing in it identifies the shopper.

If the law requires a cookie notice or consent banner on your store, you're responsible for it.

• To run our apps: show offers, apply discounts and add shipping protection
• To show you how your campaigns and tests are performing
• To support you and manage your plan and billing
• To keep our apps secure and stop fraud
• To improve our apps, using combined statistics that don't identify anyone
• To tell you about our products. You can unsubscribe any time.

We don't sell anyone's information, and we don't use your shoppers' information for advertising.

We use information about you because we need it to provide the service you signed up for, because we have legitimate business reasons (such as keeping our apps secure and improving them), and because the law requires some records, such as tax records.

We don't ask for separate consent. Approving our app's access in Shopify is what lets it use your store's information.

For shopper information, you're responsible for having a lawful reason to use our apps on your store, and we use it only on your behalf.

We only share information with companies that help us run our apps. Each one is bound by data protection terms.

• Cloudflare: hosting
• Neon: our database
• Amazon Web Services: storing campaign activity and files
• SendGrid: emails to you, using your store email, store address and plan
• Crisp: our support chat, using your store address, plan and what you type in the chat
• PostHog: understanding how you use our app dashboard and fixing errors, including recordings of dashboard sessions with typed text hidden

We also work with Shopify, because our apps run on it. We'll share information with authorities if the law requires it, and with a buyer if our business is ever sold.

If your store uses Google Analytics, Meta or Klaviyo, Monster Cart can send add-to-cart events to your own accounts. That information goes to you, not to us.

Monster Cart, Ship Protect and our other apps are made by the same company. If you use more than one, they can work together on your store. For example, Monster Cart can show Ship Protect in the cart. We may also use your store address and plan across our support tools to help you. Each app keeps its own database, and your shoppers' cart information isn't shared between apps.

• When you uninstall: we delete your store's data within 30 days, except billing records we must keep by law. We may keep combined statistics that can't be linked to your store.
• Our updates: if you signed up to our updates yourself, we keep your email address until you unsubscribe.
• When a shopper asks: Shopify passes us any request from a shopper to see or delete their information, and we deal with it within 30 days. Because we don't store information that identifies shoppers, we usually hold nothing about them.
• Billing records: kept for 6 years, as UK law requires.
• Anything else: you can ask us to delete your information at any time.

• UK and EU: you can ask to see, correct, delete or move your information, limit how we use it, or object to how we use it. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
• Shoppers: please contact the store you bought from. We'll help the store with your request.

To make a request, email support@monsterapps.shop. We may need to confirm who you are, and we aim to reply within one month.

Shopify and the companies that help us run our apps operate in other countries, including the United States and Canada. When information goes outside the UK or Europe, we use legally approved protections, such as standard contract terms approved by UK and EU regulators.

All information between your store, Shopify and our systems is sent securely (encrypted). We check that requests really come from Shopify before acting on them. Passwords for our systems are kept secure and never stored in our code, and only staff who need access have it. No system is completely secure, but if a data breach affects you, we'll tell you and the regulators as the law requires.

Our apps are for businesses. You must be over 18 to use them, and they're not aimed at children.

We may update this policy from time to time. If we make a big change, we'll try to give you at least 30 days' notice by email or in the app. The date at the top shows when it was last changed.

• Email: support@monsterapps.shop
• Post: Monster Apps Ltd, 24-26 Arcadia Avenue, London N3 2JU, United Kingdom