Privacy Policy

Last updated: October 15, 2026 · Operated by NerdLabs (Joren Winge)

FlashSaleKit is a Shopify app that schedules temporary price changes: it lowers the prices of the products a merchant chooses when a sale window opens (once, on chosen days, or every week) and puts them back when it closes. This policy explains what data the app processes, why, and how it is protected.

No shopper data. FlashSaleKit works only with the store's products and prices. It does not read orders or customers, and it does not request or store any shopper's name, email, phone number or address.

What we process

• Merchant / store data: the store's myshopify.com domain, an expiring Shopify access token, the subscription plan tier, and the store's time zone and currency (so sale windows run in store time and prices are rounded correctly).
• Store owner's email: the email address on the store owner's Shopify account (as set in Shopify, not the store's public contact email), its admin language, and whether it is a development store — used only to email the store owner: account alerts, a one-time welcome note on upgrading to a paid plan, and a one-time note after uninstalling asking what we could improve.
• Schedules: what the merchant sets up for each sale: its name, what's on sale (a tag, a collection's ID and title, or chosen product IDs), the discount, rounding and lowest price, and when it runs.
• Price changes: for each variant a sale changes, the product and variant IDs, the product title, the price and compare-at price before the sale, the sale price, and what happened (applied, put back, or left as it was), so prices can be put back exactly and shown in History.
• App settings and bookkeeping: the store's language, install date, and whether the app has asked for a review. None of it is about a person.
• Support messages: If you message us from inside the app (including a free setup or customization request), we store your messages, your shop domain, the reply-to email address and name you provide or that Shopify lists for your store, and your admin language — used only to answer you and to email you when we reply.

Why we process it

Solely to provide the app's functionality to the merchant: running the sales they schedule, putting prices back when each sale ends, and showing what each sale did, and customer support (in-app support messages and free setup and customization help). The store owner's email is used only for the emails described above, and the reply-to address only to answer your support messages. We do not use it for advertising, profiling, or sale.

Sharing

• Shopify — the platform APIs the app is built on.
• DigitalOcean — hosts the server and database.
• Mailgun — our email provider; delivers our emails to the store owner and to the reply-to address you give us for support messages (sent from support@nerdlabs.us), using the email addresses described above.

We do not sell data or share it for any other purpose.

Retention and deletion

Schedules and sale history are kept while the app is installed; a merchant can delete a schedule at any time (its history stays until the app is uninstalled). When the app is uninstalled, sessions and access tokens are removed; roughly 48 hours later Shopify sends a shop/redact request and we delete all data stored for that shop, including the store owner's email and any support messages. Support messages are also deleted sooner on request. Backup copies of support messages age out within 30 days. Because we hold no customer personal data, the customers/redact and customers/data_request webhooks have nothing to act on and are acknowledged. Prices are written to the store's products, so a sale still running when the app is uninstalled stays at its sale price in Shopify: end running sales before uninstalling.

Security

The app's database is stored on a DigitalOcean server, on a dedicated storage volume that is encrypted at rest, with SSH-key-only administrative access. The app's database is backed up hourly to the same volume, and each backup is kept for 7 days, so data deleted from the app's database is gone from its backups within 7 days. Support messages are held in our support-inbox database on the same server. All traffic uses HTTPS. App secrets are held only in the server environment.

Changes

We may update this policy; material changes will be reflected here with a new "last updated" date.

Contact

Questions about this policy or your data: support@nerdlabs.us.