Privacy Policy for all Activory's Apps on Shopify Apps
Last Updated: November 16, 2025
At Activory, protecting your privacy is one of our main priorities. This Privacy Policy describes how we collect, use, and protect information when you use our apps on the Shopify platform. This policy applies to all Activory apps including COLY - Additional Order Form. For privacy-related questions or concerns, please contact us at [email protected].
General Data Protection Regulation (GDPR)
Activory operates as a Data Controller under the GDPR. We process personal information based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill our contractual obligations to you
- Consent: Processing based on your explicit permission for specific purposes
- Legitimate Interests: Processing necessary for our legitimate business operations
- Legal Compliance: Processing required to meet legal and regulatory obligations
Data Retention
Personal information is retained only as long as necessary for the purposes stated in this policy. We use collected information to:
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain service quality and security
Once data is no longer needed, it is securely deleted or anonymized.
Data Subject Rights (for EEA residents)
If you are located in the European Economic Area (EEA), you have the following rights:
- Right to Access: Request access to your personal information
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal information
- Right to Object: Object to certain types of data processing
- Right to Restriction: Request limitation of data processing
- Right to Data Portability: Receive your data in a portable format
- Right to Withdraw Consent: Withdraw previously given consent at any time
To exercise these rights, please contact us at [email protected].
Log Files
Activory follows standard web hosting procedures by collecting log files when visitors access our websites and use our apps. This data collection is a routine part of web analytics and hosting services.
What We Collect
Our servers and hosting providers may collect the following information:
- IP Addresses: Internet protocol addresses for connection purposes
- Browser Information: Browser type and version
- Internet Service Provider (ISP): Your internet service provider details
- Timestamps: Date and time of visits and actions
- Navigation Data: Referring and exit pages
- Click Data: Number and pattern of clicks
Purpose
This information is not personally identifiable and is used exclusively for:
- Trend Analysis: Understanding usage patterns and trends
- Site Administration: Maintaining and improving site performance
- User Experience: Tracking user movement to optimize layouts and features
- Demographics: Gathering general demographic information for service improvements
Cookies and Web Beacons
Our websites and apps use cookies and web beacons to enhance user experience and collect usage information. Cookies are small text files stored on your device that help us remember your preferences and track your interactions.
Types of Cookies We Use
- Preference Cookies: Store your preferences and settings for a personalized experience
- Session Cookies: Maintain your session while navigating our sites and apps
- Analytics Cookies: Help us understand how visitors interact with our services
Purpose
We use cookies and web beacons to:
- Store visitor preferences and settings
- Track page access history for improved navigation
- Optimize user experience by customizing content
- Analyze usage patterns and site performance
- Remember your choices across visits
Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to:
- View and delete existing cookies
- Block cookies from specific sites
- Block all third-party cookies
- Clear all cookies when closing the browser
To learn more about managing cookies, visit All About Cookies.
Note: Disabling cookies may affect the functionality of our services.
How We Use Your Information
We use the information we collect for various purposes related to providing and improving our services. Here's how we use your information:
Service Delivery and Maintenance
- Providing Services: Operating and maintaining our apps and websites
- Service Improvement: Enhancing, personalizing, and expanding our offerings
- Technical Support: Responding to your support requests and technical issues
Analytics and Insights
- Usage Analysis: Understanding how users interact with our services
- Performance Monitoring: Tracking service performance and reliability
- Feature Development: Identifying needs for new features and improvements
Communication
- Service Updates: Informing you about updates, changes, and new features
- Marketing Communications: Sending promotional emails and newsletters (with your consent)
- Customer Support: Responding to inquiries and providing assistance
Security and Compliance
- Fraud Prevention: Detecting and preventing fraudulent activities
- Security Monitoring: Protecting against unauthorized access and security threats
- Legal Compliance: Meeting legal and regulatory requirements
Advertising and Third-Party Technologies
We may work with advertising partners who use various technologies to deliver and measure advertising campaigns. This section explains how third-party technologies may be used.
Third-Party Advertising Technologies
Third-party ad servers and advertising networks may use the following technologies:
- Cookies: To track ad performance and user interactions
- JavaScript: To deliver dynamic advertising content
- Web Beacons: To measure ad impressions and effectiveness
Purpose
These technologies are used to:
- Measure advertising campaign effectiveness
- Personalize advertising content based on interests
- Track conversions and user engagement
- Deliver relevant advertisements
Important Notice
Activory does not control third-party cookies or tracking technologies. Each advertising partner operates under their own privacy policy. We recommend reviewing the privacy policies of our advertising partners for detailed information about their data practices.
Third Party Privacy Policies
Activory's Privacy Policy does not apply to third-party services, advertisers, or external websites. We are not responsible for the privacy practices of third parties.
Your Responsibilities
When interacting with third-party services:
- Review Privacy Policies: Examine each third party's privacy policy to understand their data practices
- Opt-Out Options: Check for available opt-out mechanisms for data collection and advertising
- Control Settings: Manage your preferences within each third-party service
- Direct Contact: Address privacy concerns directly with the relevant third party
Managing Third-Party Cookies
You have control over how third-party cookies operate on your device:
How to Manage Cookies:
- Access your browser's settings or preferences menu
- Navigate to the privacy or security section
- Find cookie management options
- Choose to block third-party cookies or clear existing ones
For detailed guidance on cookie management across different browsers, visit All About Cookies.
Note: Blocking third-party cookies may affect your experience on some websites but will not impact the core functionality of Activory apps.
Online Privacy Policy Only
This Privacy Policy applies exclusively to online activities and information collected through our digital services.
What This Policy Covers
This policy applies to information collected through:
- Activory Websites: All Activory-owned and operated websites
- Shopify Apps: All Activory apps installed through the Shopify App Store
- Online Communications: Email and in-app messaging related to our services
- Digital Interactions: Online forms, surveys, and user interfaces
What This Policy Does Not Cover
This policy does not apply to:
- Offline Activities: Information collected through offline channels (phone calls, in-person meetings, postal mail)
- Non-Digital Communications: Verbal or written communications outside our digital platforms
- Third-Party Services: Data collection by external services not operated by Activory
For information about offline data practices, please contact us directly at [email protected].
Consent
By using our websites and apps, you consent to this Privacy Policy and agree to its terms and conditions.
What Your Consent Means
When you use our services, you agree to:
- Data Collection: Allow us to collect information as described in this policy
- Data Usage: Permit us to use collected information for stated purposes
- Communication: Receive service-related communications from us
- Policy Updates: Accept that this policy may be updated periodically
How to Withdraw Consent
You can withdraw your consent at any time by:
- Uninstalling Apps: Remove Activory apps from your Shopify store
- Email Unsubscribe: Use unsubscribe links in marketing emails
- Direct Contact: Email us at [email protected] to request data deletion or opt-out of services
Questions or Concerns
If you have questions about this Privacy Policy or how we handle your data, please contact us at [email protected]. We will respond to privacy inquiries within a reasonable timeframe.
COLY - Additional Order Form App
COLY is a Shopify app that enables merchants to add customizable order forms to their stores. This section outlines how COLY collects, uses, and protects data when merchants use the app to manage their orders and export order information.
Data Collection Through Shopify APIs
COLY accesses the following data through Shopify's Admin API with merchant authorization:
- Order Information: Order numbers, dates, financial status (paid, pending, refunded), and fulfillment status (fulfilled, unfulfilled, partially fulfilled)
- Custom Form Responses: Data submitted by customers through COLY forms, including line item properties and custom field values
- Line Item Details: Product names, quantities, and prices associated with orders
- Customer Information (Pending Approval): Customer names and email addresses will be included in exports once Shopify grants API access approval
This data is collected solely to enable merchants to view and export their order form data for their own business purposes.
How We Collect Data
COLY collects data through the following methods:
- Shopify Admin API: Authorized access granted by merchants through OAuth during app installation
- App Interface: Data accessed when merchants view orders or create exports through the COLY dashboard
- Webhooks: Real-time order updates to keep export data current
Merchants maintain full control and can revoke access at any time by uninstalling the app.
Data Storage and Security
COLY takes data security seriously and implements the following measures:
- Temporary Storage: Export files are temporarily stored in Cloudflare R2, a secure cloud storage service
- Automatic Deletion: All export files are automatically deleted after 3 days
- Encryption in Transit: All data transmitted between COLY, Shopify, and merchants is encrypted using HTTPS/TLS protocols
- Encryption at Rest: Data stored in Cloudflare R2 is encrypted at rest
- Access Controls: Strict authentication and authorization controls ensure only authorized merchants can access their own data
How We Use COLY Data
COLY uses merchant data exclusively for the following purposes:
- Export Generation: Creating CSV and Excel export files of order form data for merchants to download
- Order Display: Showing recent orders in the COLY dashboard interface
- App Functionality: Providing the core features of the COLY app
COLY does not use merchant or customer data for:
- Marketing or advertising purposes
- Profiling or behavioral analysis
- Sale or sharing with third parties
- Any purpose unrelated to the app's core functionality
Data Sharing
COLY maintains strict data sharing policies:
- No Third-Party Sharing: Customer and order data is never shared with third parties, advertisers, or marketing services
- Infrastructure Provider: Cloudflare R2 serves as our infrastructure provider for temporary export file storage. Cloudflare processes data only as necessary to provide storage services
- Merchant Ownership: Merchants retain full ownership and control of all their data at all times
Data may only be disclosed if required by law or valid legal process.
Data Retention and Deletion
COLY implements the following data retention and deletion practices:
- Export Files: Automatically deleted after 3 days maximum
- App Uninstallation: All merchant data is completely deleted when the app is uninstalled
- Deletion Requests: Merchants can request deletion of their data at any time by contacting [email protected]
- No Long-Term Storage: COLY does not retain merchant or customer data beyond what is necessary for immediate export functionality
Updates to This Privacy Policy
We may update this privacy policy from time to time to reflect changes to our data practices, new app features, or legal and regulatory requirements. Please review this page periodically for any updates.