TruePoints — Privacy Policy

Effective: August 2026

TruePoints ("the app") provides loyalty points programs for Shopify stores. This policy explains what we store and why.

What we store

• Store data: your shop domain, store name, currency, and encrypted API credentials needed to operate the app.
• Customer data: for customers who earn points — their Shopify customer ID, email, name, points balance, and a ledger of point movements (orders earned on, refunds, redemptions, merchant adjustments). We do not store payment details, addresses, or order contents beyond the subtotal used to compute points.

How it's used

Solely to run your loyalty program: awarding points on paid orders, reversing them on refunds, and minting discount codes when customers redeem. We do not sell or share data with third parties. Data lives in our database (Supabase) and is encrypted in transit and at rest; API tokens are additionally encrypted at the application layer (AES-256-GCM).

Data removal

Customer redaction requests from Shopify anonymize the member record (email, name, and customer reference removed). Store redaction after uninstall deletes all customer data for the store. You can export your full ledger at any time — no lock-in is a product promise.

Contact

Questions: joewcarson@gmail.com