This Privacy Policy explains how GrowMoe, LLC ("GrowMoe", "we", "us") handles personal data in connection with the GrowMoe platform and the GrowMoe marketing site at growmoe.com (together, the "Service").
1. Our two roles
GrowMoe handles personal data in two distinct capacities:
- As a processor — when a Shopify merchant ("Merchant") uses GrowMoe, we process their customers' personal data on the Merchant's behalf and instructions. The Merchant is the controller of that data. This includes Shopify Protected Customer Data (PCD), which we handle under Shopify's PCD requirements (Level 2).
- As a controller — for the account and contact data of the Merchant's own staff who sign in to GrowMoe, and for visitors to our marketing site.
2. Data we process
On behalf of Merchants (processor)
- Customer profile and contact data synced from Shopify (name, email, phone, addresses).
- Orders, quotes, carts, support conversations, and storefront activity.
- Consent state and marketing preferences.
As a controller
- Merchant staff account data (name, email, role) and authentication records.
- Marketing-site enquiries (e.g. early-access requests you submit).
- Limited technical/usage and error data needed to operate the Service securely.
3. How we use data
- To provide, secure, and support the Service.
- To process customer data per the Merchant's configuration and instructions.
- To meet legal, tax, and compliance obligations.
We do not sell personal data, and we do not use Merchant customer data to train models or for our own marketing.
4. Sub-processors
We use a short, vetted set of sub-processors, with data-processing agreements in place or being put in place for each. We minimise what each receives.
| Sub-processor | Purpose | Data |
|---|---|---|
| Cloudflare | Hosting, database (D1), object storage (R2), queues; cookieless Web Analytics on this website | All Service data, encrypted at rest. Web Analytics uses no browser storage and discards the visitor IP at the edge |
| PostHog | Product analytics | Pseudonymous (hashed) identifiers + non-PII event properties only |
| Sentry | Error & performance monitoring | PII-scrubbed error payloads; opaque identifiers only |
| Resend | Transactional email delivery | Recipient name and email address, plus the content of the message sent |
| Google Analytics 4 | Website analytics on growmoe.com only — never in the app | Visitor data (approximate location from IP, device, pages viewed), only after the cookie banner is accepted; advertising signals denied |
Shopify is not one of our sub-processors. It is the Merchant’s own platform and the source of the customer data the app mirrors, and the Merchant’s relationship with Shopify is separate from ours. Shopify stays the system of record for the data it owns. The full position is set out on the sub-processors page.
Customer events sent to PostHog are PII-minimised (no raw email, name, or address). Sentry runs with PII capture disabled and a scrubber driven by our PII classification. We will give Merchants advance notice of any new sub-processor so they can object, and the current list is available on request at [email protected].
5. Data residency
We make no data-residency guarantee today. Our infrastructure and named sub-processors are US-hosted, and personal data may be processed outside your own country. Full details, including how to raise residency as a requirement, are on thesub-processors page.
6. Retention
- High-volume behavioural events are retained for a bounded window (default 400 days), then rolled up or deleted.
- Core records are retained for the life of the Merchant's account and deleted on erasure (see below).
- On Shopify app uninstall, PII-classified fields are scrubbed promptly via Shopify's redaction webhooks, and the organisation's full data is deleted after a 30-day grace period.
7. Your rights
Depending on your location (e.g. under the GDPR, UK GDPR, or CCPA/CPRA), you may have rights to access, correct, delete, export, or restrict use of your personal data, and to object to certain processing.
- If you are a Merchant's customer, the Merchant is your controller — please contact them. We support their requests: GrowMoe can delete a customer's data (erasure) and export it (portability), and we honour Shopify's
customers/redact,customers/data_request, andshop/redactrequests. - If you are a Merchant staff user or site visitor, contact us at[email protected].
- California residents: we do not sell or share personal data as defined by the CCPA/CPRA. We treat a Global Privacy Control signal as a valid opt-out.
- Withdrawing consent: where we rely on consent, you can withdraw it at any time without affecting processing already carried out.
- Complaints: you have the right to lodge a complaint with your local data protection authority (e.g. your EU/UK supervisory authority). We ask that you contact us first so we can try to resolve it.
8. Do Not Track & Global Privacy Control
Our storefront tracking honours browser opt-out signals. A Sec-GPC: 1 (Global Privacy Control) signal is treated as an authoritative opt-out and suppresses non-essential tracking; a DNT: 1 (Do Not Track) signal is honoured by default and is configurable per Merchant. Suppressed events are dropped before any storage or transfer to a sub-processor.
9. Cookies
See our Cookie Policy for details on the cookies we use.
10. Security
Data is encrypted in transit and at rest, isolated per organisation, and access to customer PII is logged. We follow least-privilege access and a documented supply-chain posture.
11. International transfers
Where data is transferred across borders, we rely on appropriate safeguards (e.g. Standard Contractual Clauses).
12. Children
The Service is not directed to children and is not intended for their personal data.
13. Changes
We will post material changes here and update the "Last updated" date.
14. Contact
GrowMoe, LLC
Privacy enquiries: [email protected].