Privacy Policy

Badge Runner · Provided by Meg Interactive ("we", "us")

Effective date: September 16, 2026

Overview

Badge Runner (the "App") shows badges and labels on a Shopify merchant's products — for example "New", "Sale", "Low stock" or "Best seller" — based on rules the merchant sets and, on some plans, on the store's own sales and review data. This policy explains what data the App accesses, why, and how it is handled.

What the App does with customer data

The App processes order line items — which products were bought, in what quantity, and when — to compute sales-based badges. Shopify treats order data as protected customer data, and the App accesses it under Shopify's protected customer data requirements. The App stores no customer-identifying data: it does not request or store names, email addresses, phone numbers, addresses or customer identifiers, and it does not use cookies or tracking identifiers on the storefront.

Store data we access and store

When a merchant installs the App, we access — through Shopify's APIs and only to the extent the merchant has approved — the following store data:

Products and collections: titles, handles, tags, prices, inventory quantities, publication dates and collection membership, used to decide which badge (if any) a product qualifies for.
Orders (line items only): the products and quantities on paid orders from the last 60 days at most, plus refunds and cancellations, used to compute sales-based badges such as "Best seller" or "Selling fast". The order id and date are kept for the badge look-back window; no customer field of an order is requested or stored.
Product review summaries written to the store by review apps (an average rating and a review count per product), used for the "Top rated" badge.
Theme settings: read to tell the merchant whether the App's storefront components are enabled. The App never modifies theme code.

If the merchant switches on view-based badges, the App counts product page views as a daily total per product. A view is counted only when the shopper has consented to analytics under the store's privacy settings. No identifier of any kind — no IP address, customer id, session id, cookie or random id — is sent to or stored by the App.

How we use the data

To decide which badge each product qualifies for and to display it.
To show the merchant, inside the App, why a product carries a badge.
To respond to the merchant's and Shopify's compliance requests.

We do not sell any data or use it for advertising.

Data sharing

We do not share store data with third parties except:

Shopify, as required to operate the App on the merchant's store.
Infrastructure providers that host the App on our behalf, bound by confidentiality and used only to run the service.
Where required by law.

Data retention and deletion

We honour Shopify's mandatory compliance webhooks:

customers/data_request — we respond that the App holds no customer-identifying data: order line items are stored without any reference to the customer, so nothing can be attributed to a person.
customers/redact — likewise, there is nothing attributable to the customer to erase; the request is acknowledged and recorded.
shop/redact — 48 hours after a merchant uninstalls, we delete all data stored for the store.

Order quantity data is kept only for the badge look-back window (at most 61 days) and view counts for 8 days; both are deleted automatically after that.

Data security

Access to the App's backend is authenticated (Shopify session tokens / signed requests). Data is transmitted over HTTPS.

Changes to this policy

We may update this policy; material changes will be reflected by a new effective date at the top of this page.

Contact

Questions about this policy or your data: edward@meginteractive.com.