Shopsta Privacy Policy

Effective Date: October 24, 2026
Company: Shopsta
Contact Email: info@shopsta.online

1. Introduction

Shopsta (“we,” “us,” or “our”) develops and operates Shopify applications, including:

• BoostX
• Shopsta Landing Page Builder
• chop
• Ranksta SEO

Collectively, these applications are referred to as the “Apps,” and their associated features and functionality are referred to as the “Services.”

This Privacy Policy explains how we collect, use, store, disclose, and otherwise process personal information when merchants install or use our Apps, when individuals interact with our Services, and when visitors interact with websites or online stores where our Apps operate.

Our Apps are designed to help merchants improve their Shopify stores through the features offered by each application, which may include store optimization, landing page creation, SEO functionality, and other store-related tools.

We are committed to handling personal information responsibly and protecting the privacy of merchants, their staff, and their customers.

By installing or using our Apps, you acknowledge the practices described in this Privacy Policy, subject to applicable privacy laws.

2. Personal Information We Collect

The information we collect depends on which App you use, the permissions you grant, the features you enable, and how you interact with our Services.

2.1. Information Received Through Shopify

When you install and use one of our Apps, we may access information from your Shopify account through Shopify’s APIs, subject to the permissions granted to the particular App.

Depending on the App and its functionality, this information may include:

• Store information: Store name, store domain, store identifier, store URL, and relevant store settings.
• Merchant information: Name, email address, account details, and other information Shopify makes available to the App.
• Products and collections: Product names, descriptions, images, prices, SKUs, product identifiers, and collection information, where required for the App’s functionality.
• Online store content: Pages, themes, templates, storefront content, and related information, where the App requires access to create or optimize store content.
• SEO information: Page titles, meta descriptions, URLs, structured data, and other relevant information used to provide SEO-related functionality.
• Order and customer information: Information made available through authorized Shopify API permissions when necessary for a specific feature. Our Apps do not necessarily access order or customer information, and access depends on the permissions and functionality of the particular App.
• App configuration and preferences: Settings, feature selections, and configuration information associated with your use of an App.

Each App accesses only the information permitted by its Shopify API scopes and required for its intended functionality.

2.2. Information You Provide Directly

We may collect information you provide when installing, configuring, or using our Apps, contacting us, requesting technical support, or otherwise communicating with us.

This information may include:

• Your name and email address.
• Your Shopify store domain and related account information.
• Messages, support requests, and feedback.
• App settings, preferences, and configuration details.
• Other information you voluntarily provide to us.

We do not intentionally request personal information that is unnecessary to provide our Services.

2.3. Information Collected Automatically

When you or your staff use our Apps, we may automatically collect certain technical and usage information, depending on the App’s implementation.

This information may include:

• IP address and general technical information about your connection.
• Browser type, operating system, and device information.
• App usage events, feature interactions, and diagnostic information.
• Error reports, performance metrics, and technical logs.
• Dates and times of access and interactions with our Services.

We use this information to maintain the functionality, security, and reliability of our Apps, diagnose technical issues, and improve our Services.

2.4. Information Relating to Store Customers

Some App features may operate on or modify content displayed in a merchant’s online store. This does not necessarily mean that an App collects or stores personal information about the store’s customers.

If a particular App feature requires access to customer information, we may process that information only as permitted by Shopify, the merchant’s instructions, applicable permissions, and relevant law.

Merchants are responsible for ensuring that their use of our Apps in connection with their stores complies with applicable privacy laws and that they provide any notices or obtain any consents required for their use of customer information.

2.5. Cookies and Similar Technologies

Our Services may use cookies, local storage, or similar technologies when necessary for functionality, authentication, security, preferences, analytics, or other purposes.

The specific technologies used depend on the App and its technical implementation.

We do not claim to use advertising cookies, tracking pixels, or cross-site behavioral advertising technologies unless those technologies are actually implemented in the relevant Service.

You can manage cookies through your browser settings. Disabling certain cookies may affect the functionality of some features.

3. How We Use Personal Information

We may use personal information for the following purposes:

• Providing our Services: To operate the Apps and deliver their intended functionality.
• Processing Shopify data: To retrieve, display, create, update, or otherwise process store information as necessary to perform the functions requested by merchants.
• Maintaining and improving our Apps: To analyze performance, identify errors, develop features, and improve usability.
• Providing support: To respond to questions, troubleshoot issues, and assist merchants.
• Communicating with merchants: To send service-related messages, security notifications, important updates, and information about changes to our Apps.
• Ensuring security: To detect, investigate, and prevent fraud, abuse, unauthorized access, and other harmful activity.
• Meeting legal obligations: To comply with applicable laws, regulations, and lawful requests.
• Protecting our rights: To establish, exercise, or defend legal claims and protect our business and users.

Where applicable law requires a legal basis for processing personal information, we rely on the relevant basis, which may include performing a contract, pursuing legitimate interests, complying with legal obligations, or obtaining consent where required.

We will not use personal information for purposes incompatible with the purposes described in this Privacy Policy unless permitted or required by applicable law.

4. How We Share Personal Information

We may share personal information with the following categories of recipients where necessary for the purposes described in this Privacy Policy.

4.1. Shopify

Our Apps operate within the Shopify ecosystem. Information may be exchanged with Shopify through its platform and APIs to enable the Apps to function.

Shopify’s own processing of personal information is governed by Shopify’s applicable privacy policies and terms.

4.2. Service Providers

We may use third-party service providers to support the operation of our Apps and business.

Depending on our actual technical infrastructure, these providers may include:

• Cloud hosting and infrastructure providers.
• Database and data storage providers.
• Error monitoring and application performance services.
• Analytics and diagnostic providers.
• Customer support and communication services.
• Security and fraud prevention providers.

These providers may process personal information on our behalf when necessary to perform their services. Where required, we take appropriate measures to ensure that personal information is handled in accordance with applicable privacy laws and contractual obligations.

4.3. Legal Requirements and Protection

We may disclose personal information when we reasonably believe disclosure is necessary to:

• Comply with applicable laws, regulations, legal proceedings, or enforceable governmental requests.
• Protect the rights, property, or safety of Shopsta, our users, or others.
• Investigate fraud, security incidents, or suspected unlawful activity.
• Establish, exercise, or defend legal claims.

4.4. Business Transfers

If Shopsta is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable legal requirements.

4.5. No Sale of Personal Information

We do not sell personal information in exchange for monetary consideration.

If our data-sharing practices change in a way that requires additional disclosures, we will update this Privacy Policy and provide any notices or choices required by applicable law.

5. Advertising and Marketing

We may use merchant contact information to communicate about our Apps, provide service announcements, and, where permitted by law, share information about relevant products or services offered by Shopsta.

You may opt out of marketing communications by following the unsubscribe instructions provided in those communications or by contacting us.

Opting out of marketing communications will not prevent us from sending essential service-related, security, or transactional messages.

We do not describe our Apps as using targeted advertising or cross-site behavioral advertising unless such practices are actually implemented.

6. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including providing our Services, maintaining security, resolving disputes, and complying with legal obligations.

Retention periods depend on the type of information, the App involved, the purpose for which the information was collected, and applicable legal requirements.

When a merchant uninstalls an App, we handle the associated information in accordance with applicable Shopify requirements and applicable law.

Where required, we delete personal information following an uninstall, a valid deletion request, or the expiration of the applicable retention period.

We may retain limited information where necessary to comply with legal obligations, resolve disputes, prevent fraud, or establish, exercise, or defend legal claims. Where appropriate, we may retain information in anonymized or aggregated form that does not identify an individual.

7. Data Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, destruction, or loss.

Depending on the nature of the information and the risks involved, these measures may include access controls, authentication, encryption where appropriate, secure infrastructure, and monitoring for technical issues or security incidents.

However, no method of electronic transmission or storage is completely secure. Although we take reasonable steps to protect personal information, we cannot guarantee absolute security.

8. International Data Transfers

Shopsta and our service providers may process or store personal information in countries other than the country in which it was originally collected.

Where personal information is transferred internationally, we take steps to ensure that the transfer complies with applicable privacy laws.

Where required, we rely on appropriate safeguards, such as applicable adequacy decisions, standard contractual clauses, or other legally recognized transfer mechanisms.

9. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights concerning your personal information.

These rights may include:

• Right of access: Request information about the personal information we hold about you.
• Right to correction: Request correction of inaccurate or incomplete information.
• Right to deletion: Request deletion of personal information, subject to applicable exceptions.
• Right to restriction: Request that we restrict certain processing activities where the law provides this right.
• Right to object: Object to certain processing activities where applicable.
• Right to data portability: Request a copy of certain personal information in a portable format where applicable.
• Right to withdraw consent: Withdraw consent where processing is based on consent.
• Right to complain: Lodge a complaint with a competent data protection authority.

To exercise your rights, contact us using the contact details provided below. We may need to verify your identity before fulfilling a request.

We will respond to valid requests within the time limits required by applicable law.

9.1. European Economic Area, United Kingdom, and Switzerland

If you reside in the European Economic Area, the United Kingdom, or Switzerland, you may have additional rights under applicable data protection legislation, including the GDPR or equivalent local laws.

Depending on the circumstances, Shopsta may process personal information on the basis of contractual necessity, legitimate interests, consent, or compliance with legal obligations.

Where we rely on legitimate interests, those interests may include operating and improving our Apps, maintaining security, providing customer support, and protecting our business.

You may object to processing based on legitimate interests where provided by law. You may also have the right to lodge a complaint with your local data protection authority.

Where we act as a processor on behalf of a merchant, certain requests concerning the merchant’s customers may need to be directed to the relevant merchant, who is responsible for determining how those requests should be handled.

9.2. California and Other U.S. State Residents

Depending on applicable state law, residents of certain U.S. states may have rights to access, correct, delete, or obtain a copy of their personal information, as well as rights to opt out of certain types of data processing.

Where applicable, these rights may include opting out of the sale of personal information, targeted advertising, or certain profiling activities.

We do not sell personal information for monetary consideration. If our practices fall within a legally defined category of sale, sharing, or targeted advertising, we will provide the notices and opt-out mechanisms required by applicable law.

We will not unlawfully discriminate against individuals for exercising their privacy rights.

10. Shopify-Specific Privacy Obligations

Our Apps are designed to operate within the Shopify platform and are subject to applicable Shopify requirements.

Where applicable, we handle Shopify merchant and customer data in accordance with Shopify’s requirements for protected customer data, privacy-related requests, and data lifecycle management.

These obligations may include processing valid requests to access or delete personal information and responding to applicable Shopify privacy webhooks, including customer data requests, customer data erasure requests, and shop data erasure requests.

Where we process personal information on behalf of a merchant, we will provide reasonable assistance to support the merchant’s compliance with applicable privacy obligations.

Merchants remain responsible for their own privacy notices, legal obligations, and handling of personal information in their stores, except where applicable law provides otherwise.

11. Children’s Privacy

Our Apps are intended for merchants and businesses and are not designed to be directed toward children.

We do not knowingly collect personal information directly from children in violation of applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can investigate and take appropriate action.

12. Third-Party Websites and Services

Our Apps may interact with Shopify and other third-party websites or services.

This Privacy Policy does not govern the privacy practices of independent third parties. We encourage you to review their privacy policies before providing personal information to them.

We are not responsible for the privacy practices of third parties that operate independently of Shopsta.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Apps, data processing practices, service providers, legal requirements, or business operations.

When we make changes, we will update the effective date at the top of this document.

Where required by applicable law, we will provide additional notice of material changes.

We encourage you to review this Privacy Policy periodically to remain informed about how we handle personal information.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or would like to submit a privacy-related complaint or request, please contact us:

Company: Shopsta
Email: info@shopsta.online
Website: https://shopsta.online

For requests concerning information processed through one of our Shopify Apps, please include the name of the relevant App and your Shopify store domain, if applicable.

We will review and respond to privacy-related inquiries in accordance with applicable law.