PromoBeacon Privacy Policy
PromoBeacon (“we,” “us,” “our”) is a Shopify app built and operated by MoeZee Shop. This policy explains what data PromoBeacon accesses and stores when a merchant installs it, and what we do — and don’t do — with it.
What PromoBeacon does
PromoBeacon monitors a store’s orders, reconstructs the discounts Shopify recorded on each one, learns what normal promotion behavior looks like for that store, and flags order-level discount activity that clearly differs from it. PromoBeacon does not create, edit, or block discounts — it is read-only monitoring.
What data we access
PromoBeacon requests the read_orders and read_discounts access scopes only — no write scopes. Through these we access:
- Order ID, order name, and creation time
- Order and line-item monetary values, and discount allocations (which discount applied, how much, and to which line items)
- Currently configured discount definitions, for best-effort attribution of a discount to the promotion that likely produced it
- The shop’s domain, app settings, and the store owner’s email address, used only to send PromoBeacon alerts on paid plans
What we don’t access
PromoBeacon does not request, access, or store customer personal data — no customer names, emails, phone numbers, or shipping or billing addresses. It works on order-level monetary and discount data, not on who placed the order.
How we store and process data
Data is stored only for the shop that installed PromoBeacon, kept only while the app is installed, and used only to provide PromoBeacon’s monitoring features. We use service providers to run the app: cloud hosting and a managed database to store and process data, and an email delivery provider to send alerts. We don’t sell data, share it with third parties for advertising or analytics, or use it to train AI or machine-learning models.
Where data is processed
PromoBeacon runs on Google Cloud (United States) with a managed Postgres database (Neon). Alert emails are sent through Resend. These providers process data only to run the service.
Security
- Data is encrypted in transit (HTTPS/TLS) and at rest.
- Access to production systems is limited to the developer and protected with two-factor authentication.
- Development and test data are kept separate from production data.
Data retention and deletion
When a merchant uninstalls PromoBeacon, we permanently delete all data associated with that shop — settings, order observations, and promotion-pattern history — automatically, via Shopify’s mandatory shop/redact webhook.
PromoBeacon also implements Shopify’s customers/data_request and customers/redact compliance webhooks. Because we don’t store customer personal data, there is no customer-identifying data to return or erase; customers/redact also removes any order-linked observations named in the request as a good-faith measure.
Security incidents
If we become aware of a security incident affecting store data, we will notify affected merchants without undue delay, and within 72 hours where required.
Your rights
Merchants (the data controllers for their own stores) and their customers can ask what PromoBeacon holds, or request deletion, at any time by contacting us.
Changes to this policy
If this policy changes, we’ll update the “Last updated” date above. Material changes to what data we collect or how we use it will also be communicated to installed merchants.
Contact us
Questions about this policy or PromoBeacon’s data practices: support@moezeeshop.com.