Privacy Policy

Overview

Reroute is a Shopify app that helps merchants recommend alternative products to their customers. We are committed to protecting the privacy of both merchants and their customers. This policy explains what data we access and how we use it.

What Data We Collect

Merchant Data

When you install Reroute, we access your Shopify store's product data (titles, handles, inventory status, and metafields) via the Shopify Admin API. This data is used solely to power the alternative product recommendation feature.

We store session data via Prisma for Shopify OAuth authentication. This includes your shop domain and access token, which are required for the app to function.

Customer Data

We do not collect, store, or process any customer personal data. Reroute operates entirely within the Shopify ecosystem. Alternative product recommendations are rendered on the storefront using data that lives in your Shopify store's metafields.

Storefront Behaviour

Reroute does not set any cookies on your storefront. We do not use tracking pixels, analytics scripts, or any third-party data collection tools on customer-facing pages. The storefront component reads product metafield data directly from Shopify's Liquid/JSON APIs.

Data Storage

Product mapping configurations are stored as metafields within your Shopify store — meaning the data lives in your store, not on our servers. Session and authentication data is stored securely in our database and encrypted at rest.

GDPR Compliance

Reroute implements all required Shopify GDPR webhooks (customer data request, customer data erasure, and shop data erasure). Since we do not store customer personal data, these webhooks are acknowledged but perform no data operations — there is simply no customer data to return or erase.

Third-Party Services

Reroute interacts only with the Shopify Admin API and Shopify's storefront infrastructure. We do not share data with any third-party services, advertisers, or analytics providers.

Data Retention

If you uninstall Reroute, your session data is deleted from our database. Product metafields remain in your Shopify store (as they belong to you) and can be removed manually if desired.

Contact

If you have any questions about this privacy policy, please contact us at support@rerouteapp.co.uk.