This Privacy Policy explains how Jodax ("we", "us", "our") handles information in connection with Sam — Cart Offers & Rewards ("Sam", "the app"), a Shopify app. By installing or using Sam, you agree to the practices described here.
1. Who we are
Sam is built and operated by Jodax, based in Australia. For any privacy questions or requests, contact us at support@jodax.io.
2. What Sam stores
Sam is a cart-offers and rewards app. To do its job, it stores a small amount of merchant and shop-level information:
- Your offer configuration — the thresholds, messages, discount and gift settings, schedules and country targeting you create in the app.
- Your shop's domain and plan status — to identify your store and know which features you have access to.
- Account and session information — provided by Shopify when you install the app (such as the store owner or staff name, email and the secure access tokens Shopify issues so the app can operate). This is standard for every embedded Shopify app.
- Cart snapshots — when a shopper's cart is active, the app receives cart contents (product titles, quantities, prices and a Shopify-generated cart token) so it can calculate and display the right offer. These snapshots contain no shopper personal data — no name, email, address, phone number or IP address. The cart token is an anonymous session identifier and is not linked to any customer account.
What Sam does NOT store: Sam does not collect or store your customers' names, email addresses, shipping or billing addresses, phone numbers, payment details, or IP addresses. Payment information is handled entirely by Shopify and its payment providers — Sam never sees it.
3. How we use this information
We use the information above only to:
- Run the app — calculate offers, display banners, and apply the discounts and rewards you configure.
- Identify your store and confirm your plan and access.
- Keep the app working, diagnose problems, and provide support when you contact us.
We do not use your data for advertising, and we do not sell or rent it to anyone.
4. How information is shared
We don't sell your data. Information is only shared as needed to run the service:
- Shopify — Sam runs on Shopify's platform and uses Shopify's APIs. Your use of Shopify is governed by Shopify's Privacy Policy.
- Infrastructure providers — we use hosting and database services to run the app. These providers process data on our behalf under their own security and privacy commitments, and only to keep the app running.
- Legal requirements — we may disclose information if required by law.
5. Data retention
We keep your offer configuration and shop information for as long as Sam is installed on your store. Cart snapshots are retained to support the app's operation. When you uninstall Sam, or when Shopify sends us a shop data-deletion request, we remove your shop's stored data (see the next section).
6. Data deletion & your rights
Sam supports Shopify's mandatory privacy webhooks:
- Shop redaction — when you uninstall your store and Shopify requests deletion, Sam deletes your shop's stored data.
- Customer data requests / redaction — because Sam does not store any customer-identifying data, there is no customer personal data to return or delete. These requests are acknowledged accordingly.
Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you (for example, under the GDPR or CCPA/CPRA). Since the only personal data Sam holds is the store owner/staff account information Shopify provides, you can exercise these rights — or ask any question about your data — by contacting support@jodax.io.
7. Security
We take reasonable technical and organizational measures to protect the information Sam stores, including secure transmission and access controls. Access tokens are stored securely and used only to operate the app. No method of storage or transmission is perfectly secure, but we work to protect your data and to limit what we collect in the first place.
8. Children
Sam is a business tool for Shopify merchants and is not directed at children. We do not knowingly collect personal information from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll change the "last updated" date above. Significant changes will be communicated where appropriate.
10. Contact us
If you have any questions about this Privacy Policy or how Sam handles data, email us at support@jodax.io. We're happy to help.
This policy describes how Sam handles data and is provided for transparency. It is not legal advice. Merchants remain responsible for their own store's privacy policy and for how they handle their customers' data.