Privacy Policy

Last updated: May 2026

Who we are

Clinch ("we", "us") is a Shopify app that helps merchants recover revenue with exit-intent offers. This policy explains what data we collect, why, and how we handle it. Contact: me@hectorguedea.com.

Data we collect from merchants

• Store identifier (your myshopify.com domain) and the app configuration you set (discount percentage, headline, brand color, trigger delay).
• Order data delivered by Shopify's order webhooks, used solely to attribute recoveries: order ID, order total, and the discount code applied.
• Basic account contact information you provide when contacting support.

Data we process from shoppers

• In-session behavioral signals (cursor movement toward the browser bar, time on page) processed in the shopper's browser to detect exit intent. These signals are not transmitted to us or stored.
• A random session identifier stored in the browser's sessionStorage, used to limit how often the offer appears (at most once per product, cart, or collection) and to link a generated discount code to the session. It contains no personal information and expires with the browser session.
• We do not collect shopper names, emails, phone numbers, or payment details. We do not set third-party tracking cookies, and we do not sell or share data with advertisers.

How we use data

Exclusively to operate the service: generating unique discount codes via Shopify's Discount API, attributing completed orders to Clinch offers, and showing merchants their recovery dashboard. We do not use merchant or shopper data for advertising or profiling.

Data retention and deletion

Configuration and attribution records are kept while the app is installed. When you uninstall Clinch, Shopify sends us an uninstall webhook and we delete shop data in accordance with Shopify's data-protection requirements, including mandatory GDPR webhooks (customer data request, customer redact, shop redact).

Your rights

Merchants and shoppers in applicable jurisdictions (including the EU/EEA under GDPR and California under CCPA) may request access to or deletion of their personal data by emailing me@hectorguedea.com. Shopper data requests are also honored automatically through Shopify's privacy webhooks.

Changes

We will post any changes to this policy on this page and update the date above.