Privacy Policy & Terms.

Introduction

GiftLift ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application and related services.

By installing and using GiftLift, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Store Information

When you install GiftLift on your Shopify store, we collect:

• Shop Domain: Your Shopify store's domain (e.g. yourstore.myshopify.com)
• Store Name: Your store's display name
• Email Address: The email Shopify provides for your account in the OAuth session payload. We do not send marketing email and we do not initiate outreach; this field is stored only because Shopify includes it in the session and we do not use it for support, notifications, or marketing.
• Plan Information: Your Shopify plan level for feature compatibility

Configuration Data

We store your app configuration settings:

• Gift wrap options you create (option name, description, and price)
• Free vs. paid option settings
• Gift message field settings (enabled, label, character limit)
• Cart drawer / cart page placement and styling preferences

Cart Data (Client-Side Only)

The app reads cart information in the customer's browser to display and attach gift options:

• Cart Contents: Line items and cart total, to show applicable wrap options and add a selected option to the cart
• Currency: Your store's currency for price display formatting

Usage Data

We automatically collect certain information about how you use our app:

• Features used and settings configured
• Error logs for troubleshooting
• App installation and uninstallation events

Gift Messages

If you enable the gift message feature, a shopper may enter a free-text message at the cart. Because this field is written by the shopper and may contain personal information (for example, a recipient's name), we treat it with particular care:

• The message is attached to the order as a Shopify line-item property, so it travels with the order through Shopify to your order details and packing slip.
• The message is stored on the Shopify order, which you control within your Shopify admin. GiftLift does not copy, store, log, or transmit the gift message text to our own servers.
• We do not use gift message content for analytics, marketing, training, or any purpose other than passing it to Shopify as part of the order the shopper is creating.

How We Use Your Information

We use the collected information for the following purposes:

• Provide Services: To display gift wrap and message options on your Shopify store and add selected options to the cart
• Save Settings: To persist your configuration across sessions
• Improve the App: To understand usage patterns and improve our services
• Customer Support: To respond to your inquiries and provide technical support
• Billing: To process subscription payments through Shopify's billing system
• Communication: To send important updates about the app, such as feature changes or maintenance notices

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

• Shopify: We operate within Shopify's platform and share necessary data with Shopify for app functionality and billing
• Cloud Hosting: Our servers are hosted on secure cloud infrastructure (Fly.io)

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Data Security

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted using SSL/TLS
• Configuration data is stored in secure, isolated database instances (Fly.io managed Postgres with encryption at rest and encrypted backups)
• Regular dependency updates, automated vulnerability scanning, and internal security review
• Limited employee access to customer data

Order Data and Analytics

GiftLift provides merchants with a dashboard that shows gift-option attach rate and the resulting impact on average order value. To produce these metrics, GiftLift subscribes to the Shopify orders/paid webhook and reads the following fields from each paid order:

• The Shopify order id (an opaque numeric identifier)
• Order total, subtotal, and currency
• Line-item price and quantity
• Line-item properties — specifically the tags written by the GiftLift widget (such as _giftlift_wrap and _giftlift_option_id) used to identify which gift option was added and attribute the added revenue

GiftLift does not read, store, transmit, log, or share any of the following from order, customer, or checkout data: customer first or last name, email address, phone number, shipping or billing address, IP address, browser session, device identifier, the gift message text, or any other field that identifies a customer.

GiftLift does not access the Customers resource and does not request access to protected customer fields.

Retention

Per-order analytics records are retained until one of the following occurs, at which point they are permanently deleted:

• The merchant uninstalls the app (app/uninstalled webhook).
• The merchant requests shop-level deletion (shop/redact webhook — within 30 days of uninstall per Shopify GDPR policy).
• A specific customer requests deletion (customers/redact webhook — records for the listed order ids are removed within the GDPR 30-day window).

Sub-processors

GiftLift stores analytics records in Fly.io managed Postgres (encrypted at rest, encrypted backups) and serves traffic from Fly.io edge regions. No analytics data is shared with any third party.

Data Retention

We retain your data for as long as your app is installed and your account is active. Upon uninstallation:

• Store settings, configuration, and gift-option definitions are deleted within 30 days
• Session data is immediately revoked
• All analytics records (order facts and daily metrics) are permanently deleted within 30 days

Your Rights (GDPR)

If you are located in the European Union, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Request your data in a portable format
• Restriction: Request limitation of data processing
• Objection: Object to certain data processing activities

To exercise these rights, contact us at hello@verdash.io.

California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

Cookies and Tracking

Our app widget on your storefront may use:

• Local Storage: To cache your gift-option configuration for faster rendering
• Session Storage: To maintain state during the shopping session

We do not use third-party tracking cookies or advertising trackers in our storefront widget.

Our storefront widget sends aggregated event counts (such as "gift options viewed" or "gift option added to cart") to GiftLift's own servers via the browser's sendBeacon API. These payloads contain only the event type and the merchant's shop domain — no customer identifier, no cart contents, no gift message text, no IP address, no cookie value. They are used solely to compute aggregate metrics displayed in the merchant's dashboard, and are subject to the same retention and deletion rules as other analytics records (see Order Data and Analytics, above).

Children's Privacy

GiftLift is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: hello@verdash.io
• Support: hello@verdash.io

---

Terms of Service

Last updated: June 8, 2026

1. Acceptance of Terms

By installing or using GiftLift, you agree to be bound by these Terms of Service. If you do not agree to these terms, do not use our app.

2. Description of Service

GiftLift is a Shopify application that lets merchants offer gift wrapping and gift messages on their storefront. Shoppers can add free or paid gift options to their cart, and the selected option and any gift message are attached to the order. The service includes configurable gift options, cart-drawer and cart-page placement, and an attach-rate dashboard.

3. Account Requirements

• You must have an active Shopify store to use GiftLift
• You must have authorization to install apps on your Shopify store
• You are responsible for maintaining the security of your accounts

4. Acceptable Use

You agree not to:

• Use the service for any illegal purpose
• Misrepresent gift options, pricing, or what a shopper will receive
• Attempt to reverse engineer or modify the app
• Interfere with or disrupt the service's infrastructure
• Use the service to display false or deceptive information

5. Gift Fulfillment

• Physically wrapping or packaging orders that select a gift option
• Including or printing the gift message as appropriate
• Pricing gift options accurately and charging applicable taxes
• Ensuring your gift offerings comply with applicable laws

We are not responsible for gift fulfillment or any discrepancies between the options displayed and what customers actually receive.

6. Billing and Payments

• All billing is handled through Shopify's billing system
• Subscription fees are charged monthly
• You may cancel at any time through your Shopify admin
• Refunds are handled according to Shopify's refund policy
• A free trial may be offered for new installations

7. Service Availability

We strive to maintain high availability but do not guarantee uninterrupted service. We may perform maintenance that temporarily affects service availability. We are not liable for any downtime or service interruptions.

8. Limitation of Liability

GiftLift is provided "as is" without warranties of any kind. We are not liable for any indirect, incidental, special, or consequential damages arising from your use of the service, including but not limited to:

• Lost sales or revenue
• Customer complaints about gift fulfillment
• Technical issues affecting your store
• Any claims arising from your gift offerings

Our total liability is limited to the amount you paid for the service in the preceding 12 months.

9. Indemnification

You agree to indemnify and hold harmless GiftLift and Verdash from any claims, damages, or expenses arising from your use of the service, your gift offerings, or violation of these terms.

10. Changes to Service

We reserve the right to modify, suspend, or discontinue any part of the service at any time. We will provide reasonable notice for significant changes.

11. Termination

Either party may terminate this agreement at any time. Upon termination, your right to use the service ends immediately, and we may delete your data according to our Privacy Policy.

12. Governing Law

These terms are governed by the laws of the United States. Any disputes shall be resolved in the courts of California.

13. Contact

For questions about these terms, contact us at hello@verdash.io.