Privacy Policy

Last updated: July 7, 2026

This Privacy Policy explains how Customer Match Lists (“we”, “us”, the “App”) collects, uses and protects information when a Shopify merchant installs and uses the App. By installing the App you agree to this policy.

1. Information we access

With your authorization, the App reads the following from your Shopify store to build advertising audiences:

The App requests read‑only access and never modifies your store data.

2. How we use the information

Customer information is used solely to create and maintain Customer Match / Custom Audience lists that you choose to sync to your connected advertising accounts (Google Ads, Meta and Microsoft Advertising). We do not sell your data or use it for any purpose unrelated to providing the App.

3. Hashing & data protection

Before any customer email or phone number is uploaded to an ad platform, it is normalized and irreversibly hashed using SHA‑256 in line with each platform's specification. Raw personal identifiers are not shared with advertising platforms. Data is transmitted over encrypted (HTTPS/TLS) connections and access is restricted.

4. Data sharing

Hashed audience data is shared only with the advertising platforms you explicitly connect and only for the audiences you choose to sync. We use those platforms' official APIs and are bound by their data‑use policies. We may use infrastructure and email service providers strictly to operate the App.

5. Data retention & deletion

We retain customer data only while the App is installed and needed to keep your audiences current. When you uninstall the App, or when Shopify sends a customer/shop data‑erasure request, we automatically purge the associated customers, orders, audiences and integration records. You may also request deletion at any time by emailing us.

6. Your rights (GDPR/CCPA)

Depending on your location, you or your customers may have the right to access, correct or delete personal data. We honor Shopify's mandatory GDPR webhooks (customer data request, customer redact and shop redact) and will assist with verified requests sent to the contact below.

7. Cookies

Our public marketing pages may use essential cookies and, where enabled, a live‑chat widget. The embedded app relies on Shopify session tokens rather than tracking cookies.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

9. Contact

Questions about this policy or your data? Email support@i3info.org or visit our contact page.