Magestore Privacy Policy

Who we are and what this policy applies to

1. In this policy, our company, MAGESTORE CO., JSC, will be referred to as “Magestore”, “we”, “us”, and “our”. Our contact information is:

Email: info@magestore.com
Website: www.magestore.com
Ticket system: support.magestore.com

2. Our privacy policy applies to magestore.com and other Magestore websites, our products and services (including the apps we publish on the Shopify App Store, see Shopify apps), and any communications you have with us (eg. customer service inquiries). If you do not agree with our policy, please do not send us personal information.

3. In the context of this policy, “personal information” and “personal data” have the same meaning. They refer to information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, or online identifier such as IP address.

Information we collect

4. When you use our websites and services, you provide us with the following information which we store securely:

• Account information such as username and password
• Contact information such as name, email address, billing address, phone number and country
• Notification and marketing preferences
• Information about the products and services you sell (including inventory, pricing, sale, transaction, tax, and other data)
• Information about your business (number of stores, warehouses, or staff)

5. Analytics: We collect analytics information when you use our Services to help us improve our products and services. Analytics information may include your IP address or a list of pages you visited on our websites. We use Google Analytics as our provider. Please refer to Google Privacy Policy to see how it works. You can also opt out of Google Analytics here.

6. Cookies: We use cookies to analyze, personalize and improve our website. For more information on how this works, please check our Cookie Policy.

How we collect information

7. We collect personal information directly when you provide it to us. Examples include:

• Book a demo
• Purchase our products
• Subscribe to newsletters or email lists
• Participate in our promotional campaign
• Fill out a survey
• Communicate with us via chat or emails

8. Payment information: We may receive information from payment providers to process transactions. Please note that we DO NOT store payment details on our sites.

How we use information

9. We will use your information to fulfill a contract or take steps linked to a contract. If you buy software or services from us, we will use your information to fulfil your order, keep you updated, and to provide you with the software or service you have requested. We will only send you details related to your orders such as purchase confirmations and invoices.

10. With your consent, we will:

• Send promotional emails about new products, offers, surveys, newsletters, promotions, and events or other information which you may find interesting, using the email address you have provided
• Personalize our services and websites by providing features that match your interests and preferences
• You can opt-out any time by contacting us at info@magestore.com, sending a ticket on our support system, or following the unsubscribe instructions included in our communications.

11. Other legitimate interests: Magestore is constantly working on improving our products and services, and your data plays an important role in helping us develop better software. As a result, we may use your information for other purposes such as:

• Operate our services
• Verify your identity
• Give you access to our products and services
• Respond to support tickets and questions
• Internal record keeping
• Analyze how our sites are used
• Investigate and prevent fraudulent transactions, unauthorized access to our sites, and other illegal activities

How we share information

We will only share information with third parties when needed, as described below:

12. Service provider: We work with third party service providers that help us with:

• Website development (WordPress and WPEngine)
• Email marketing (ActiveCampaign)
• Business intelligence and analytics (Google Analytics)
• Payment processing, security and fraud prevention, and other services (such as PayPal)

These providers may have access to or process your personal information for the purpose of providing these services for us.

13. Compliance with legal requests: we may share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

14. Testimonial: From time to time, we want to share the stories of successful customers on our website. We will obtain your consent to use your name, information about your business, and how you want to be featured on our communications. If you wish to update and delete you testimonial, please contact us at info@magestore.com.

15. Social media widgets: Our blog includes social media features to let you share our posts more easily. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Your interactions with these features are governed by the privacy policy of the companies providing it.

Data retention period

16. We retain your personal information for as long as is necessary to provide the services to you and others, and to comply with the law (such as tax, accounting or other legal requirements).

Security

17. We take data security very seriously. In order to prevent unauthorised access or disclosure, we have put in place technical and managerial procedures to safeguard and secure the information we collect online. This includes secure connections for our administration system. We also implement other security and access controls, including username and password authentication and data encryption where appropriate. Only our authorized employees have access to your personal data.

Age limit

18. Our sites are not suitable for people under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a person under 18 has provided us with personal information, we will take steps to delete such information.

Your rights

19. You have the right to access personal information we hold about you.

20. You have the right to ask that your personal information be corrected or updated.

21. If you no longer want us to use your personal information or use our services, you can request us to close your account and delete your information. Please note that certain information from the deleted account might be maintained for record keeping purposes, to complete transactions, or to comply with our legal obligations.

22. You also have the right to be removed from any of our mailing list any time by emailing us at info@magestore.com.

23. You can request for a copy of your data in a structured, machine readable, and commonly used format to be transferred to another service provider.

24. You can exercise your rights via our support system or send an email to info@magestore.com.

25. We will respond to your request within thirty (30) days. Please note that we may request evidence of your identity and details of the information you wish to see to help us locate it. We will also let you know if we cannot fulfill your request and the reasons why we can’t.

Shopify apps

26. Magestore also publishes apps for Shopify merchants on the Shopify App Store. This section explains how our app MS Order Printer ‑ PDF Invoice (“the App”) handles information from the email account you connect to it. For this information, this section takes priority over the rest of this policy, and paragraphs 10 and 11 do not apply.

27. What the feature does: The App lets you connect your own email account so invoices and other order documents are sent to your customers from your own mailbox. The App currently supports Gmail and Google Workspace accounts. We will update this section before we support other email providers.

28. Information we collect: When you connect an email account, the App only accesses:

• Account information such as the email address and profile name of the connected account
• Sender information such as your primary sending address, send-as aliases and sender names (only if you grant this additional permission)
• Permission to send email on your behalf
• Connection credentials such as the OAuth access token and refresh token issued by your email provider

29. The App does not read, search or store your inbox, email history, drafts, contacts, calendar or files stored in Google Drive. The content of the emails the App sends (such as the invoice and your customer’s name and email address) comes from your Shopify store, not from your email account.

30. How we collect information: We receive this information directly from your email provider’s official APIs after you sign in to the provider and approve the requested permissions on its consent screen.

31. How we use information: We only use this information to provide the App’s email sending feature, which you can see and control in the App:

• Email address and profile name: To identify and display the connected account
• Sender addresses and aliases: To let you choose the “From” address
• Permission to send email: To send invoices and order documents to your customers through your account
• Access token: To authorize each send request and other actions you have approved
• Refresh token: To renew the access token so the feature keeps working without you signing in again

We do not use this information for advertising, marketing, profiling, or any purpose other than providing or improving this feature.

32. How we share information: We do not sell or rent this information. We only share it with the provider that hosts the App, to run the App, or when required by law. We never transfer it to advertising platforms, data brokers or information resellers, and we never use it to serve ads or to determine creditworthiness or for lending purposes.

33. Human access: Our employees do not read this information unless you give us explicit permission (eg. in a support ticket), it is necessary for security purposes such as investigating a bug or abuse, or it is required by law.

34. AI and machine learning: We do not use information obtained through Google Workspace APIs or other email provider APIs to develop, improve or train generalized or non-personalized AI or machine learning models, and we do not transfer it to third parties for that purpose.

35. Data retention period: We delete this information as follows:

• When you disconnect your email account in the App, we delete the stored tokens and sender information immediately
• When you uninstall the App, we delete them 48 hours after uninstallation

If you revoke the App’s access from your Google Account permissions page, the App can no longer use the stored tokens to access your account, and we delete them when you disconnect the account in the App or uninstall the App.

We keep records of sent emails (recipient address, date and delivery status) while the App is installed, to show your sending history in the App, and delete them 48 hours after you uninstall the App.

36. Security: Access tokens and refresh tokens are encrypted at rest, and all information is transmitted over secure (TLS) connections. Only our authorized employees can access this information, on a need-to-know basis.

37. Google API Services User Data Policy: MS Order Printer ‑ PDF Invoice’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Updates

38. Magestore will update this Privacy Policy as often as needed to stay up to date with legal requirements and user demands.

39. We will communicate any significant changes to you directly on this website or via email. Please consider visiting this page from time to time for the latest information on our privacy practices.