Privacy policy

Who we are

GiftLift: Free Gift Rewards (“GiftLift”) is a Shopify app developed and operated by PINETECH IT SOLUTIONS PRIVATE LIMITED (Pinetech ITS) under the Coderbunch brand. This policy describes how data is handled when a merchant installs the app and when shoppers interact with free gift promotions on an active store.

Zero Personal Shopper Data Collection

GiftLift operates on a serverless, zero-cloud architecture powered directly by Shopify Functions (WebAssembly). Our app calculates discounts natively inside Shopify’s checkout engine.

• We do not collect, harvest, store, or sell any customer personal identifiable information (PII).
• We do not track buyer browsing history, IP addresses, email addresses, or payment card details.
• We do not use tracking cookies or storefront tracking pixels.
• The storefront progress bar only reads cart totals within the shopper's local browser session to update visual progress towards reward milestones.

Information from merchants

When you install GiftLift, Shopify provides standard authentication tokens so the app can render its management interface inside your Shopify admin panel:

• Store Identity: Your myshopify.com domain and staff account language preferences for interface localization.
• App Configurations: Your reward tiers (spend thresholds, gift descriptions, and celebration messages) are stored directly within your store's native Shopify Metafields (under the $app:giftlift namespace).

Shopify API Access Scopes

The app requests the minimum necessary permissions required to operate:

• write_discounts: Needed to create, update, and activate the automatic free gift discount function within Shopify checkout.
• read_products & write_products: Needed to inspect gift product tags (giftlift-tier-1, etc.) and assist merchants in configuring qualifying gift items.

Infrastructure & Providers

Gift discount calculations run 100% on Shopify's internal WebAssembly infrastructure at checkout. We do not maintain any external database storing customer records or sales transactions.

Retention and Deletion (GDPR & CCPA Compliance)

We strictly comply with Shopify's mandatory data privacy webhooks:

• Customer Data Request: Because we do not store customer records, no personal customer data exists to retrieve.
• Customer Data Erasure: No shopper data is retained.
• Shop Redact: When a store uninstalls the app, session records are immediately purged from our application storage, and all remaining store records are wiped upon receipt of Shopify’s mandatory shop redact webhook (within 48 hours).

Your choices and requests

Merchants can disable or delete gift reward rules at any time directly through the app interface or Shopify Admin. To submit privacy inquiries or request verification of data deletion, please contact us at hello@pinetechits.com.

Changes to this policy

We may update this policy periodically to reflect enhancements in the app or changes in Shopify platform requirements. Any updates will be posted here with an updated effective date.