SurgeVolume Privacy Policy
This Privacy Policy provides clear, transparent disclosures on how store data is processed when you install or use SurgeVolume ("the App"), an automated volume discount, quantity breaks, and average order value optimization engine for Shopify stores.
SurgeVolume Privacy Guarantees at a Glance
Shopify App Store StandardWe never harvest, collect, store, or sell customer names, phone numbers, email addresses, or physical delivery locations.
All app subscription fees are billed natively through Shopify Billing API. We never process or store credit card details.
Automated active handling for customers/data_request, customers/redact, and shop/redact within 48-hour SLA.
All merchant data in transit is encrypted with TLS 1.3 / HTTPS; database storage is secured with AES-256 encryption at rest.
Overview & Zero End-Shopper PII Policy
SurgeVolume ("the App", "we", "us", or "our") is a specialized Shopify application built to enable e-commerce merchants to create volume discounts, tiered pricing breaks (e.g. "Buy 2 Get 10% Off, Buy 3 Get 20% Off"), and in-cart milestone progress rewards.
SurgeVolume acts purely as an on-page and in-cart pricing calculation engine. The App does NOT collect, request, record, or store customer names, residential addresses, phone numbers, personal email addresses, or payment card details.
When a shopper activates a volume discount offer, the discount is processed directly within Shopify's native checkout infrastructure. SurgeVolume processes only anonymous product quantities and cart threshold metrics for aggregate analytics.
Information Collected via Shopify Admin API
When you install SurgeVolume on your Shopify store, we access only the minimal required metadata via Shopify REST and GraphQL APIs strictly necessary to execute discount tiers and cart calculations:
Shop domain (myshopify.com), primary account email, currency, timezone, and locale.
Product IDs, variant IDs, SKUs, titles, and price tiers needed to render volume break tables.
Volume break rules, percentage/fixed savings, custom colors, and widget layouts created by the merchant.
Total volume discount redemptions and aggregate revenue boosted (zero individual customer identity data).
Merchant Billing & Shopify Billing API
SurgeVolume utilizes the official Shopify Billing API (shopify.authenticate.admin.billing) for all recurring subscription plans and trial periods.
• We do NOT collect, request, process, or store credit card numbers, CVVs, bank account credentials, or billing addresses.
• All charges, prorations, free trials, and invoices are handled natively by Shopify and charged directly to your monthly Shopify merchant invoice.
Mandatory Shopify Compliance Webhooks
In accordance with mandatory Shopify Partner requirements, SurgeVolume actively maintains automated endpoints for all required privacy webhooks:
When a shopper requests their data report through Shopify Admin, SurgeVolume fulfills the request within 48 hours. Because SurgeVolume does not store customer personal data, an empty record confirmation is returned.
When a customer requests data erasure through Shopify, SurgeVolume automatically purges any temporary session records associated with the customer identifier.
Triggered 48 hours post-uninstallation. The App permanently erases all merchant access tokens, discount campaign configurations, and shop records from our database.
GDPR & CCPA/CPRA Data Rights
Merchants and individuals whose data is processed by SurgeVolume have rights under the GDPR (European Union & UK) and CCPA/CPRA (California), including:
- Right to Access: Request full transparency regarding any data stored about your store.
- Right to Rectification: Request correction of inaccurate settings or profile metadata.
- Right to Erasure ("Right to be Forgotten"): Request immediate permanent deletion of store records.
- No Data Selling: We do NOT sell, rent, trade, or monetize merchant data or customer transaction information to third parties.
Subprocessors & Data Security
SurgeVolume utilizes vetted, enterprise cloud infrastructure partners to maintain high availability and security:
Platform core & native billing provider (USA/Canada)
Encrypted relational database & cloud compute
SSL termination & server compute infrastructure
Contact & Data Protection Officer
For privacy inquiries, GDPR data requests, or Shopify App Store reviewer questions, please reach our compliance team directly:
App Name: SurgeVolume (Volume Discounts, Quantity Breaks & AOV Booster)
Privacy Email: privacy@surgeaov.com
Support Email: support@surgeaov.com
Website: https://surgeaov.com