Granted Assets

Privacy Policy

Last updated: January 1, 2025

1. Introduction

Granted Assets (“we”, “us”, or “our”) operates as a Shopify app that enables merchants to sell digital downloads. This Privacy Policy explains how we collect, use, and protect information about merchants who install our app (“Merchants”) and their customers (“Customers”).

2. Information we collect

From Merchants

  • Shopify store information (store name, domain, plan)
  • Files you upload to our service
  • Configuration settings within the app
  • Billing information (processed entirely by Shopify)

From Customers

  • Order information passed from Shopify (order ID, email address, line items)
  • Download activity logs (file accessed, timestamp, approximate location)

3. How we use information

  • To deliver purchased digital files to customers
  • To enforce download limits and link expiry
  • To provide Merchants with download analytics
  • To send transactional emails (download links)
  • To operate, maintain, and improve the service
  • To comply with legal obligations

4. Data sharing

We do not sell personal data. We may share data with third-party service providers that help us operate the service (for example, cloud storage and email delivery providers). All such providers are contractually required to protect your data and use it only for the services they provide to us.

5. Data retention

We retain Merchant data for as long as your app subscription is active. Upon uninstallation of the app, we will delete your data within 30 days, except where retention is required by law. Customer order data is retained for a minimum of 12 months to support download access and dispute resolution.

6. Cookies and tracking

The Granted Assets app interface may use cookies or similar technologies to maintain your session within the Shopify admin. We do not use cookies for advertising or cross-site tracking.

7. Your rights

Depending on your location, you may have the right to access, correct, or delete personal data we hold about you. To exercise these rights, please contact us at the address below.

8. Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. Download links are cryptographically signed and time-limited to prevent unauthorised access.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify Merchants of material changes via email or an in-app notice. Continued use of the app after changes take effect constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions or data requests, please contact us at: privacy@grantedassets.com