Ahsaniya

Privacy Policy

Last updated: 10 October 2026

This Privacy Policy explains how information is collected, used, and protected when you use Aplo (“the App”), a Shopify product-page content design app. The App is developed and operated by Ahsaniya(“we”, “us”, or “our”), an independent app developer based in MH, India.

By installing or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not install or use the App.

1. Who this policy applies to

This policy applies to merchants who install the App on their Shopify store. The App is a content-building tool for product pages; it does not collect, store, or process the personal data of your customers (the shoppers who visit your store).

2. Information we collect

We collect only the minimum information needed to operate the App.

2.1 Store and account information

When you install the App, Shopify provides us with basic information about your store, including your store domain, store name, and the access permissions (scopes) you grant. We use this to authenticate your store and operate the App.

2.2 Content you create

The content modules, layouts, and appearance settings you build with the App are stored so the App can display and manage them. This content is stored both in your Shopify store (as metafields within the aplus_content namespace) and in our database to power the App's editor and live preview.

2.3 Product and theme information

With your permission, the App reads product information (to let you build content for your products) and reads your published theme (to render content correctly on your storefront). The App requests the following Shopify permissions:

  • read_products and write_products : to read product details and attach content to products
  • read_themes : to read your published theme so content renders correctly
  • read_analytics : to provide anonymous, aggregated usage insights

The App does not request or access any permission that grants access to your customers' personal data.

2.4 Anonymous usage analytics

We collect anonymous, aggregated analytics about how the App's content modules are used (for example, module views and interactions). This data is not linked to any individual shopper and contains no personally identifiable information. Analytics records are automatically deleted after 30 days (a 30-day time-to-live).

2.5 Billing information

If you subscribe to a paid plan, billing is handled entirely by Shopify through the Shopify Billing API. We do not receive, store, or process your payment card details. We only receive subscription status information (for example, whether your subscription is active) from Shopify.

2.6 Merchant contact details and communication preferences

To set up your account and communicate with you about the App, we collect the contact email address associated with your Shopify store, which we obtain from the Shopify Admin API. We also store your store domain, your current plan (for example, free or paid), and your marketing communication preference.

During onboarding you can choose, through an opt-in checkbox that is unchecked by default, whether to receive product and marketing updates from us. We record this choice (your marketing consent) so that we only send marketing emails to merchants who have opted in. You can withdraw this consent at any time by using the unsubscribe link in any marketing email or by contacting us. Withdrawing consent does not stop essential operational emails needed to run the App (see Section 3).

3. How we use information

We use the information described above to:

  • Authenticate your store and provide access to the App
  • Store, display, and manage the content you create
  • Render your content correctly on your storefront
  • Provide anonymous usage insights
  • Process and manage your subscription through Shopify
  • Send you essential operational and onboarding emails about the App (for example, setup guidance, important service notices, and account-related messages). Because these are necessary to operate the App, they are sent to all merchants regardless of marketing preferences.
  • Send product and marketing updates (for example, new features and tips) only to merchants who have opted in, and only for as long as that consent remains in place
  • Provide customer support and respond to your requests
  • Maintain the security and reliability of the App
  • Comply with our legal obligations

4. What we do NOT do

  • We do not collect or store the personal data of your store's customers (shoppers).
  • We do not sell, rent, or trade any information to third parties.
  • We do not use your data for third-party advertising, and we do not share it with advertisers. The only emails you may receive from us are our own operational and (if you opt in) product update messages.
  • We do not access payment card details.

5. Data sharing and subprocessors

We do not sell your information. We share data only with the service providers necessary to run the App:

  • Shopify : the platform on which the App runs; provides store data and handles billing.
  • MongoDB Atlas : our database provider, which stores your content and App configuration.
  • Cloudflare : content delivery and security (protects and routes traffic to the App).
  • Hetzner : our server hosting provider.
  • Loops : our email delivery service, which we use to send onboarding, operational, and (where you have opted in) product update emails. We share your store contact email address and limited account details (such as your store domain and plan) with Loops solely to deliver these emails.

Each of these providers processes data only as needed to provide their service to us, and is bound by their own privacy and security obligations.

6. Data retention

  • Content and store configuration: retained for as long as the App is installed. When you uninstall the App, your data is scheduled for deletion.
  • Contact email and communication preferences: retained for as long as the App is installed. When you uninstall the App, your contact is marked as uninstalled and removed from active email sequences, and the associated data is deleted in line with the schedule below.
  • Anonymous analytics: automatically deleted after 30 days.
  • On uninstall: we automatically clean up your store's data. Shopify also sends us a shop/redact request 48 hours after uninstall, upon which we permanently delete the remaining data associated with your store.

7. Data security

We take reasonable technical and organizational measures to protect your information, including:

  • Encrypted connections (HTTPS/TLS) for all traffic
  • Verification of all incoming requests from Shopify (HMAC signature validation)
  • Access controls and least-privilege permissions
  • A reputable, secure hosting and database infrastructure

No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.

8. GDPR and data requests

We support the mandatory Shopify GDPR compliance webhooks:

  • customers/data_request : although the App does not store customer personal data, we respond to data-request notifications as required.
  • customers/redact : we honor customer redaction requests.
  • shop/redact : 48 hours after you uninstall the App, we permanently delete your store's data.

If you are located in a region with data-protection laws (such as the EU/EEA under the GDPR), you have rights regarding your personal data, including the right to access, correct, or delete it. To exercise these rights, contact us at the email below.

9. International data transfers

Our infrastructure and service providers may process data in countries other than your own. In particular, our email delivery provider (Loops) may process your contact email address and related account details outside your region, including in the United States. Where data is transferred internationally, we rely on our service providers' safeguards to protect that data.

10. Children's privacy

The App is intended for use by businesses and merchants. It is not directed at children, and we do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

12. Contact us

If you have any questions about this Privacy Policy or how your information is handled, please contact us:

Ahsaniya
MH, India
Email: support@ahsaniya.com

Aplo Privacy Policy