Privacy Policy - Bye Bad Traffic

byebadluck – Bye Bad Traffic

Effective date: January 1, 2025
Last updated: January 1, 2025

This Privacy Policy explains how byebadluck (“we”, “us”, or “our”) collects, uses, and protects information when merchants install or use the Bye Bad Traffic Shopify application (the “App”). We are committed to handling data responsibly, transparently, and in accordance with Shopify App Store requirements.

This policy applies only to information processed in connection with the Bye Bad Traffic app. It does not apply to data processed directly by Shopify or to data that merchants collect from their own customers through their stores.

When a merchant installs the App, Shopify provides us with limited store-related information necessary to operate the App. This information may include the store domain, Shopify store identifier, installation status, billing status, and merchant contact details made available through Shopify APIs. We do not access customer payment details, checkout information, or order content.

To provide the App’s core functionality, we store and process the configuration data that merchants create within the App. This includes country-based allow or block rules, IP allowlists and blocklists (including single IP addresses or IP ranges), and the enabled or disabled status of those rules. This information is used solely to apply the access controls defined by the merchant.

In order to evaluate and apply traffic rules, the App may process limited technical request data such as IP address, country or region derived from the IP address, timestamps, and the outcome of rule evaluation (allowed or blocked). This information is processed only for access control and operational purposes and is not used for advertising, profiling, or tracking end customers across websites.

If a merchant contacts us for support, we may collect the information provided in that communication, such as name, email address, store domain, message content, attachments, and diagnostic information required to resolve the issue. Support data is used only to provide assistance and improve service quality.

We use collected information solely to operate and maintain the App, apply merchant-defined traffic rules, ensure security and prevent abuse, respond to support requests, improve reliability and performance, manage billing through Shopify’s Billing API, and comply with applicable legal obligations. We do not sell, rent, or trade merchant data.

Information is shared only in limited circumstances. We share data with Shopify as required to provide an embedded app experience and core functionality using Shopify’s APIs and platform tools. We may also share data with trusted third-party service providers that help us host, monitor, and support the App. These service providers are authorized to process data only on our behalf and are required to protect it. We may disclose information if required by law, regulation, court order, or governmental request, or when necessary to protect the rights, safety, and security of merchants, Shopify, or byebadluck.

We retain app-related data only for as long as necessary to provide the App and fulfill legitimate business purposes. App configuration and traffic-related data is retained while the App is installed and active. When a merchant uninstalls the App, related configuration and traffic data is deleted or anonymized within thirty days, unless a longer retention period is required for legal, security, or compliance reasons. Support communications may be retained for a reasonable period to maintain service quality and audit records.

We implement reasonable technical and organizational measures to protect information, including secure data transmission using TLS/SSL, access controls, and infrastructure-level security practices. While no system can be guaranteed to be completely secure, we continuously work to safeguard merchant data.

Data may be processed in countries other than the merchant’s country, depending on where our infrastructure and service providers operate. Where applicable, we ensure appropriate safeguards are in place for international data transfers.

Merchants have control over their data and may review or update app configuration at any time, revoke permissions, or uninstall the App through Shopify. Merchants may also request access to or deletion of data associated with their store by contacting us at support@byebadluck.com.

The App operates within the Shopify admin environment and uses only cookies or similar technologies required for authentication, security, and session management. We do not use the App for advertising tracking or cross-site behavioral profiling.

The App is intended for Shopify merchants and is not directed toward children. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Any changes will be posted with an updated “Last updated” date. Continued use of the App after changes indicates acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us at support@byebadluck.com or visit https://byebadluck.com.