LandingPin — Privacy Policy

Last updated: 2026-06-07

LandingPin (“the app”, “we”) helps Shopify merchants pin the products from their ad creatives to the top of collection landing pages and reports aggregate performance. This policy explains what data the app accesses, how it is used, and how it is protected.

Data we access

With the merchant’s consent at install, the app uses the Shopify Admin API with these scopes:

• read_products — to let the merchant select products to pin and to confirm a product is published to the Online Store.
• read_orders — used only to attribute an order to an ad campaign. We read the order’s landing page URL (to detect our ?c=<campaign> link) and the order total (to report revenue).

Order data is classified by Shopify as protected customer data. We request only the minimum needed for revenue attribution (order data) and do not request or use protected customer fields (customer name, email, phone, or address), and we never store them.

Data we store

The app stores only non-personal, aggregate data:

• Merchant campaigns (name, collection, selected product handles, optional UTM values).
• Aggregate counters per campaign and per ad source: impressions, clicks, orders, and revenue totals, by day.
• The Shopify session/offline access token required to operate, stored securely.

We do not store any buyer’s personal information, and we do not set buyer cookies or track individual shoppers.

How data is used

• To render the merchant’s pinned products on their landing pages.
• To show the merchant aggregate analytics (impressions, clicks, CTR, orders, revenue, conversion rate), including a breakdown by ad source.

We do not sell data or share it with third parties for advertising.

Data protection

• All data is transmitted over HTTPS.
• We follow data minimization — only the fields described above are accessed.
• Access tokens are stored encrypted and used solely to operate the app for that shop.

Data retention and deletion

The app implements Shopify’s mandatory privacy webhooks:

• customers/data_request — we hold no customer data; nothing to provide.
• customers/redact — we hold no customer data; nothing to delete.
• shop/redact — on this request (or after uninstall), we delete the shop’s campaigns, aggregate metrics, and stored token.

Retention: aggregate, non-personal metrics are kept only while the app is installed. On shop/redact — and within 48 hours of uninstall — we delete the shop’s campaigns, aggregate metrics, and stored access token. No buyer personal data is ever stored, so there is nothing to retain or delete for shoppers.

Contact

For privacy questions or requests, contact: bronck88@gmail.com