Privacy policy
Last updated October 17, 2026GMVify Free Gift & BOGO (shown in your Shopify admin as GMVify Free Gift, “the app”) is a Shopify app by Vitamin Creative Lab Limited (“we”, “us”). It gives shoppers free gifts the merchant set up: buy X get Y, BOGO, a gift for spending a cart total or for buying a quantity. A gift can copy the personalization of the item that earned it, such as a name or photo. This policy explains what the app keeps, why, who receives it and how long it stays. It covers merchants who install the app and the shoppers who get its gifts in their stores. GMVify is a brand of Vitamin Creative Lab.
What we collect
| Data | From | Why |
|---|---|---|
| Store domain and access token | Shopify, when the merchant installs | To run the app |
| Subscription status and plan, trial end date and the coupon codes used, the store’s Shopify plan name and whether it’s a development store | Shopify billing | To apply the right plan and its limits, and to show the Plans page |
| Each order: its number, total and currency, whether it contains a gift, and the revenue the gift brought | The orders/create webhook; the first time analytics opens, the last 60 days of orders | Analytics, and to count revenue from gifts toward plan limits |
| Each gift line on an order: campaign, product, variant, quantity, value and cost | The same orders | Analytics (gifts given and gift cost) |
| The revenue credited to each campaign on an order | The same orders | Analytics per campaign |
| A staff member’s chosen admin language, with their Shopify user ID | The admin | To show the app in that language |
The store’s settings and gift campaigns are kept in Shopify, in the app’s own metafields and metaobjects. They are not in our database.
Shopper data
- The app does not keep shoppers’ names, email addresses, phone numbers, addresses or payment details. Order records hold totals and products only.
- Shopify treats the orders the app reads as protected customer data. The app has Level 1 access, without names, email addresses, phone numbers or addresses, and uses it only to run the app and for analytics.
- When a gift copies a personalization (for example a name or photo link), the shopper’s browser copies it from the item that earned the gift onto the gift line in their Shopify cart. It goes with the order in Shopify; our servers do not store it.
- The storefront remembers which gift pickers and notices it has already shown in the browser’s session storage, so they aren’t repeated. This stays on the shopper’s device and is cleared when the tab is closed. The app sets no cookies.
Who we share data with
We do not sell data, use it for advertising or share it with ad networks. These providers receive data to run the app:
| Provider | What for | What it receives |
|---|---|---|
| Render (Ohio, United States) | Hosting the app’s servers and database | Everything listed under “What we collect” |
| Cloudflare (United States) | GMVify’s coupon service, which checks the coupon codes the app accepts | When the store uses a coupon: the store’s domain, the code and when it was used |
| Shopify | The platform the app runs on | What the app writes to the store: settings, campaigns, the gift discount and the checkout rule |
We may also disclose data when the law requires it.
How long we keep it
- While the app is installed, records stay so analytics can count them.
- When a merchant uninstalls, every record we keep for the store is deleted at once, except the record of the trial and coupon it used, so a reinstall doesn’t start a second trial. Shopify cancels the subscription and removes the app’s settings, campaigns, discount and checkout rule from the store.
- 48 hours later Shopify asks us to erase the store’s data (shop/redact). We delete everything except the store’s domain, when its free trial ended and the coupon it used, if any. We keep these only so the store can’t start a second free trial or use a coupon again; they hold no shopper information.
- We keep nothing per shopper, so a shopper’s erasure request (customers/redact) has nothing to delete and a data request (customers/data_request) has nothing to return.
Your rights
Shoppers: the store you bought from controls your order. Ask the store to see or delete your data. You can also contact us directly.
Merchants: uninstalling removes your data as described above. Depending on where you live (for example the EU, UK or California) you have the right to access, correct, delete or move your data and to complain to a data protection authority.
Changes and contact
If we change this policy we will update the date above, and tell merchants in the app when the change is significant. Questions or requests: email support@gmvify.com or see the support page.