Privacy Policy

Last updated: 2026-08-22

This Privacy Policy describes how Joycraft ("we", "us", or "our") collects, uses, and discloses your personal information when you install and use the Pixova Shopify application ("the App").

1. Information We Collect

When you install and use the App, we may collect the following types of information:

We do NOT collect:

2. How We Use Your Information

We use the collected information solely for the following purposes:

We do NOT sell, rent, or share your data with third parties for marketing purposes.

3. Data Storage and Retention

Your App configuration data is stored on our secure servers. We retain this data for as long as you have the App installed on your store. Upon uninstallation, all store-specific data is automatically deleted within 48 hours in accordance with Shopify's API license and data protection requirements.

4. Data Sharing and Disclosure

We may share your information only in the following limited circumstances:

Third-party advertising pixels: When you enable one or more advertising pixel channels in the App and save your pixel IDs, the App activates a Shopify web pixel on your store. Once active, the web pixel dispatches checkout events (checkout started, payment information submitted, and checkout completed) directly from the customer's browser to the endpoints of the advertising platforms you have configured (Google Ads, Meta/Facebook, and/or TikTok). For completed orders, the event payload includes the order value, currency, and an order identifier. Pixova does not receive, store, or process this customer event data on its servers; the data does not pass through our infrastructure.

With respect to this customer event data, you (the merchant) are the data controller, and the respective advertising platforms are independent recipients of the data. You are responsible for complying with all applicable privacy and data protection laws, including providing your customers with appropriate notice in your own privacy policy and obtaining any consent required for the use of these third-party pixels. The collection and use of data by each advertising platform are governed solely by its own privacy policy:

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

To exercise any of these rights, contact us at support@joycraft.dev. We will respond within 30 days.

6. Shopify API Compliance

The App uses Shopify's APIs to operate. By using the App, you agree to comply with Shopify's API License and Terms of Use. The App's access to your store data is governed by the permissions (scopes) you grant during installation. We handle all data received from Shopify in accordance with Shopify's API License requirements, including the mandatory GDPR webhook endpoints (customers/data_request, customers/redact, shop/redact).

7. Security

We implement industry-standard security measures to protect your data: all data transmission is encrypted via HTTPS/TLS, access tokens are stored with restricted file permissions, and webhook endpoints are protected by HMAC signature verification.

8. Cookies

The App operates within the Shopify Admin iframe and does not set any third-party cookies in merchant or customer browsers. The App relies on Shopify's session management for authentication.

9. Children's Privacy

Our App is not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

For questions about this Privacy Policy, contact us at support@joycraft.dev.

This policy is effective as of 2026-08-22.