Privacy Policy

Who this covers

Liftoff is a Shopify app, made by the team behind Product Overviews. It lets a merchant build shoppable boards and place them on their storefront, and reports back on how shoppers used them.

This policy covers the Liftoff app in the Shopify admin, the Liftoff Studio at liftoff.productoverviews.com, and the boards that render on a merchant's storefront. Product Overviews is a separate product with its own policy at productoverviews.com/privacy; installing one does not install the other, and the two do not share store data.

For data about a merchant's shoppers, the merchant is the controller and Liftoff is a processor acting on their instructions. Their own store privacy policy governs their relationship with their shoppers.

Store data we access

When a merchant installs Liftoff, Shopify grants a limited set of permissions. We request only what the app needs to work:

• Products (read_products) — titles, handles, images, prices, variants and collections, so a merchant can pick products for a board and so boards keep showing accurate details as the catalog changes.
• Files (write_files) — when a merchant uploads board imagery, the file is written to their own Shopify Files and we store only a reference to it. Their images stay in their store, not in ours.
• Web pixel (write_pixels, read_customer_events) — lets us register Liftoff's pixel and receive the storefront events described below, which is what connects a board to what shoppers went on to buy.

We also store the store domain, an access token issued by Shopify, and the app settings and boards the merchant creates.

Shopper data on the storefront

Boards are interactive, and reporting on them means recording what happened. This is the section worth reading closely.

How a shopper is recognised

• An anonymous identifier, stored in the shopper's browser for that store. It identifies a browser rather than a person, and it means nothing outside the store it was created for.
• A Shopify customer id, but only when the shopper is signed in to the store. Shopify provides it to the app; we store the id alone, never the customer record behind it.
• An identifier from Shopify's pixel, which is what lets a purchase be credited to the board that prompted it. If a shopper signs in partway through, the records from before and after are treated as the same shopper rather than as two.

What we record

• Board activity: a board being viewed, a product on it being clicked, and a product being added to cart from it — with the page the board was placed on.
• Cart and checkout events from Shopify's pixel: add to cart, checkout started, and purchases — the product, variant, quantity, order value, currency and order id.

Every record is scoped to the one store it happened in. Liftoff does not combine a shopper's activity across different merchants, and does not build a profile that follows anyone between stores.

Merchant account data

For the people who use the app: we hold what is needed to run the account and support it — the store the app is installed on, sign-in state for the Studio, and any message a merchant sends us. Standard technical logs are kept for security and troubleshooting.

Payments

Service providers

We work with a small set of trusted service providers that help us run the product — including cloud hosting and data storage providers, as well as the platform our customers install our app on. We share information with them only as needed to deliver the service, and under agreements that require them to protect it and use it solely on our behalf. We do not use shopper data to train AI models.

We do not sell your personal information.

We may disclose information where the law requires it, or to protect the rights and safety of our users and ourselves.

Retention and deletion

We keep data for as long as the app is installed and it is needed to provide the service. Specifically:

• Uninstall. We act on Shopify's shop/redact request, sent about 48 hours after uninstall, by deleting the store's record and everything attached to it — boards, shopper records and events.
• A shopper asks to be deleted. On Shopify's customers/redact request we delete that shopper's record, including any anonymous record merged into it, and unlink their events so nothing remains attributable to them. Aggregate counts stay correct; the person behind them is gone.
• A shopper asks what we hold. On Shopify's customers/data_request we assemble everything Liftoff holds for that customer and provide it to the merchant, who is the controller and forwards it to the shopper.
• A merchant can ask us to delete their workspace data at any time by emailing the address below.

Storage in your browser

On a merchant's storefront, Liftoff keeps up to three small values in the shopper's browser, stored on the merchant's own domain:

• The anonymous identifier described above, which persists between visits, so that a board seen on one visit and a purchase made on another are not counted as two different people.
• A timestamp recording roughly when this browser last checked in with us, so that browsing many pages of a store costs one request rather than one per page. It contains no identity.
• A visit id for the current browser tab, which lets a merchant see how many visits a board had rather than only how many views. It is discarded when the tab closes and identifies nothing beyond that one tab.

None of them is readable by another website, and none is used for advertising. Clearing site data for the store removes them, after which the browser is unrecognised. If browser storage is unavailable — in private browsing, for instance — the identifier lasts only for the page being viewed and nothing is retained.

Separately, when a merchant signs in to the Liftoff Studio we set one essential cookie to keep them signed in. It is required for the app to work and is not used for tracking or advertising.

Your rights

Depending on where you live, you may have the right to access, correct, delete or port your personal information, or to object to certain processing. Shoppers should start with the store they shopped at, since the merchant is the controller and Shopify's request flow reaches us from there; we act on every request we receive. Merchants can write to us directly.

International transfers and security

Our providers operate globally, so data may be processed in a country other than yours, under appropriate safeguards. Data is encrypted in transit and access to production systems is limited to those who need it.

Children

Liftoff is a tool for merchants and is not directed at children. We do not knowingly collect personal information from children.

Changes to this policy

We will update this page as the app changes, and revise the date at the top when we do. If a change materially affects how merchant or shopper data is handled, we will tell merchants in the app.

Contact

Questions about this policy, or a request about your data? Email support@productoverviews.com and we will respond in line with applicable law.