Smaily Connect for Shopify — Privacy Policy

Effective date: 14 June 2026

Smaily Connect (“the app”) connects a Shopify store to the merchant’s own Smaily email-marketing account and, optionally, to Smaily Campaign Intelligence. This policy explains what data the app processes, why, where it goes, and how it is protected. The app is operated by Sendsmaily OÜ.

Data we process

• Customer name and email address — to sync the merchant’s subscribers and customers to the merchant’s own Smaily account, and (only when the merchant uses the Campaign Intelligence add-on) as Campaign Intelligence’s per-customer identity.
• Order and product / catalog data — to power automations (welcome, first order, abandoned cart) and, when enabled, product recommendations.
• Anonymous browse events — collected through Shopify’s sandboxed Web Pixel and gated by Shopify’s customer-privacy (consent) API.

We request only the customer fields the app needs — name and email. We do not request phone numbers or postal addresses.

How we use it

• Syncing the merchant’s subscribers and contacts to their Smaily account, gated by marketing consent.
• Triggering the merchant’s chosen Smaily automations.
• Generating personalized product recommendations (optional paid add-on).

We do not sell personal data, and we do not use it for any purpose beyond those stated above.

Where data goes

• Always (core): the merchant’s own Smaily account.
• Conditional (paid add-on): Smaily Campaign Intelligence — only if the merchant subscribes to the Campaign Intelligence service. It is not enabled by default. The Campaign Intelligence API key is never exposed to the storefront.

Security

• Credentials and API keys are encrypted at rest (AES-256-GCM).
• All data is transmitted over HTTPS.
• Each Shopify store’s data is strictly isolated from every other store.

Data retention and deletion

• Uninstalling the app removes all data the app itself stores: Shopify’s shop/redact request triggers a full purge of the app’s records for that store.
• Uninstalling does not automatically delete the merchant’s data held in Smaily or Campaign Intelligence — a merchant may uninstall only to switch storefront platforms while keeping their Smaily account and history. That data is retained under Smaily’s retention policy and is removed when the merchant explicitly closes those services.
• The app prunes its own operational records automatically (event logs and transient queue / checkout records are kept only for a limited period).

Your rights

A specific individual’s data can be erased at any time, whether or not the app is currently installed:

• Shopify’s customers/data_request returns an export of the data we hold for that customer.
• Shopify’s customers/redact, or a direct request, deletes that customer’s data from Campaign Intelligence and from Smaily.

To exercise access, correction, or deletion rights, contact us at info@smaily.com.

Contact

Sendsmaily OÜ — info@smaily.com