Privacy policy

Last updated: 27 October 2026

This policy explains what information Appco Software ("we") collects and how we use it when a merchant installs and uses WhyNot Shoppable Video (the "app") on a Shopify store.

1. Our role

We are the controller of the merchant account information described below. The app doesn't collect information about a store's customers, so we don't process customer personal data on a merchant's behalf. If your business needs a data processing agreement, contact us.

2. Information we collect

• The store's Shopify domain and store ID.
• Shopify access tokens that let the app work with the store.
• Widget designs, settings and the storefront text the merchant sets.
• Information about the merchant's videos: names, taglines, descriptions, references to the files in the store's Shopify Files, and the products and collections tagged to each video.
• The store's plan, upload counts and technical records needed to run the app.

The app doesn't read orders or payment details and doesn't add analytics or tracking to the storefront. Videos are uploaded to the merchant's own Shopify Files and served by Shopify.

3. How we use information

• To provide the app: upload and manage videos, build widgets and show them on the storefront.
• To check the store's plan with Shopify and apply the matching features.
• To answer support requests and keep the app secure and working.

We don't sell information or use it for advertising.

4. Legal basis for processing (EU and UK)

We process merchant information to perform our agreement with the merchant (providing the app) and for our legitimate interests in supporting merchants and keeping the app secure.

5. Where information is stored

Our server (Hostinger) and our database (Supabase) are hosted in the United States. Information may therefore be processed outside the merchant's country. We use encrypted (HTTPS) connections and restricted access to protect it.

6. Service providers

• Supabase: hosts our database (United States).
• Hostinger: hosts the app's server (United States).

7. Shopify privacy requests

The app responds to Shopify's mandatory privacy requests. Because we hold no customer data, customer data requests and customer deletion requests have nothing to return or delete. Store deletion requests are described below.

8. Retention and deletion

• When a merchant uninstalls the app, we delete the store's access tokens and its widgets stop showing.
• About 48 hours after uninstall, Shopify asks us to delete the store's data, and we delete all of it from our database.
• Videos stay in the merchant's Shopify Files; the merchant can delete them there at any time.
• Short-lived technical records, such as records of Shopify notifications, are deleted within 30 days.

9. Your rights

Merchants can ask us to access, correct or delete their information, or object to how we use it, by emailing support@appcosoftware.com.

10. California privacy rights

We don't sell or share personal information as defined by California law.

11. Cookies and browser storage

The app doesn't set its own tracking cookies. On the storefront, it keeps one setting in the shopper's browser session to remember that a floating video card was closed; it contains no personal information and is cleared when the browser session ends.

12. Children

The app is for businesses and isn't directed to children.

13. Changes to this policy

If we change this policy, we'll update this page and its date.

14. Contact

Appco Software
114/FLR-1 Wing D, Ramdev Plaza, Phiroshah Mehta Road, Santacruz (W), Near Milan International Hotel, Mumbai, Maharashtra 400054, India
support@appcosoftware.com