Privacy Policy
Trackable short links — Privacy Policy Effective date: November 1, 2026 Operator: COSTSIFY LLC, United States Contact: support@costsify.com
About this service
Trackable short links helps Shopify merchants create marketing links, add campaign parameters, and compare daily click totals. This policy explains how COSTSIFY LLC processes information when merchants use the app or visitors follow its short links.
Information we process
We process the store's myshopify.com domain, store profile information supplied by Shopify, authorization sessions, access and refresh tokens, and subscription status. Shopify may also provide staff account identifiers and profile information as part of an authorization session.
We store the destination URLs, short codes, domains, labels, expiry settings, campaign parameters, and saved presets that merchants enter. The analytics database records daily click totals for each short link. These counts are not unique-visitor counts and do not attribute orders or sales revenue.
Hosting systems process request metadata, which can include IP addresses, timestamps, user agents, request paths, and URL parameters. Merchants should avoid putting personal information or secrets in marketing URLs. Information submitted in support requests is used to handle those requests.
How we use information
We use information to authenticate merchants, provide redirects and analytics, manage subscriptions, answer support requests, troubleshoot failures, and protect and maintain the service. We do not sell merchant or visitor personal information or use it for third-party targeted advertising.
Service providers and location
The app integrates with Shopify for installation, authentication, and subscription billing. It uses Google Cloud Run and Cloud SQL in us-central1, United States, for hosting and database storage, and Google Cloud services for operational logs, backups, and secret storage. Information can be processed in the United States even when merchants or visitors are located elsewhere. Providers process information to supply their services under their respective contractual terms.
Retention and deletion
We retain store configuration, links, campaign settings, and click aggregates while needed to provide the app to the merchant. On receiving Shopify's uninstall notification, the app removes authorization sessions and stored store access credentials and marks the installation inactive. On receiving Shopify's shop/redact privacy notification, it deletes the store's live application records, including associated short links and click aggregates. Merchants can also request deletion through support.
Operational logs and backups have separate retention cycles, so copies can remain after live records are deleted until those cycles expire. The database is configured for seven retained daily backups and seven days of point-in-time recovery logs. Backups retained when an instance is deleted follow their configured retention; a final instance-deletion backup is configured for 30 days. We may retain information required by applicable law or to resolve an ongoing dispute. Support correspondence is retained as needed to resolve and document the request.
Privacy requests
Contact support@costsify.com to request access, correction, or deletion of app data, or to ask questions about this policy. We may verify that you are authorized to act for the store. Visitors and customers may also contact the merchant whose marketing link they used. We handle applicable privacy requests in accordance with applicable law and the Shopify privacy-request process.
Security and changes
We use HTTPS, authenticated database connections, and access controls to protect app information. No service can guarantee absolute security. We may update this policy as the service changes; the effective date above identifies the current version.