Winlift Privacy Policy

Last updated: August 29, 2026

Who we are

Winlift is a Shopify app that provides a discount wheel, urgency widgets and product recommendations for online stores. This policy explains what data the app processes, why, and how it is handled. Contact: busseozgenoglu@gmail.com

Data we process for merchants

When a store installs Winlift we store the shop domain, an access token scoped to the permissions approved at install (discounts, customers, products), and the settings the merchant configures in the app. We read live product inventory to display stock notices, and we create discount codes in the store when a visitor wins the wheel.

Data we process for store visitors

When a visitor spins the wheel we store: the email address they enter (kept only for the store it was entered on), the prize and discount code they received, their marketing consent choice, and a one-way hash of their IP address used solely for rate limiting and abuse prevention. Product-view counts used for social proof are stored as anonymous, hashed, per-day entries — they cannot be traced back to a person.

What we never do

• We do not sell or share personal data with third parties.
• We do not use visitor data for advertising or cross-store profiling.
• We do not display fabricated numbers: stock and view counts are real.

GDPR & data deletion

Winlift implements Shopify's mandatory privacy webhooks. When a customer requests their data through Shopify, we surface every record we hold for them. When a customer requests erasure, their wheel entries are deleted automatically. When a store uninstalls the app, all of that store's data — settings, entrants, counters and sessions — is deleted within 48 hours.

Data storage

Data is stored in a PostgreSQL database hosted on Railway. Access tokens and email matching use one-way hashes where possible; discount codes are single-use.

Contact

Questions about this policy or your data: busseozgenoglu@gmail.com