JD1 Apps - Social Hub - Privacy Policy

# Privacy Policy — JD1 Social Hub

**Last updated:** May 9, 2026

## Overview

JD1 Social Hub ("the App") is a Shopify app developed and operated by JD1 Studio ("we", "us", "our"). This Privacy Policy describes how we collect, use, store, and protect information when merchants install and use the App on their Shopify stores.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Shopify's Partner Program Agreement.

## Information We Collect

### From Merchants
When you install JD1 Social Hub, we collect and store the following information related to your Shopify store:

- Shop domain (e.g., yourstore.myshopify.com)
- Access tokens issued by Shopify (used for API authentication only)
- Widget configuration: phone numbers, social channel usernames/URLs, custom messages, country codes, display preferences

### From End Customers (Store Visitors)
**JD1 Social Hub does NOT collect, store, or process any data from end customers (visitors of your Shopify store).** The widget is purely a display element. When a visitor clicks a contact button, they are redirected to the corresponding platform (WhatsApp, Instagram, Email, etc.) using standard URL schemes. No tracking, analytics, or personal data is captured by us.

## How We Use Information

We use the collected merchant information solely for:

- Authenticating API requests with Shopify
- Storing your widget configuration so it persists across sessions
- Synchronizing configuration to Shopify metafields, which the storefront extension reads to render the widget
- Providing customer support if you reach out

We do **not** sell, rent, share, or use your data for advertising or any third-party purposes.

## Data Storage and Security

Merchant data is stored in encrypted databases hosted on secure cloud infrastructure (Vercel / managed PostgreSQL providers). Access tokens are encrypted at rest. All data transmission uses HTTPS/TLS encryption.

## Data Retention

We retain merchant configuration data only while the App is installed. Upon uninstallation, all data associated with your store is automatically deleted within 48 hours through Shopify's `app/uninstalled` webhook.

## GDPR Compliance

We comply with all GDPR mandatory webhooks for Shopify apps:

- `customers/data_request`: We do not store customer data; if a request is received, we respond confirming no data exists.
- `customers/redact`: Same as above — no customer data to redact.
- `shop/redact`: When Shopify notifies us 48 hours after a shop is permanently deleted, we delete all associated configuration data.

## Your Rights

As a merchant, you have the right to:

- Access the data we have stored about your shop
- Request deletion of your data (achieved by uninstalling the App)
- Request a copy of your stored configuration in machine-readable format

To exercise these rights, contact us at the email below.

## Cookies

JD1 Social Hub does not use cookies on storefronts. The App's admin panel uses standard Shopify session cookies (managed by Shopify, not by us).

## Third-Party Services

JD1 Social Hub integrates with:

- **Shopify Admin API**: To read shop information and write metafields. Subject to [Shopify's Privacy Policy](https://www.shopify.com/legal/privacy).
- **Shopify Theme App Extensions**: Renders the widget on your storefront via Shopify's native extension system.

We do not integrate with any third-party analytics, advertising, or tracking services.

## Children's Privacy

JD1 Social Hub is not intended for use by individuals under 18 years of age and does not knowingly collect data from children.

## Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Material changes will be communicated to active merchants via email.

## Contact

For privacy-related questions or to exercise your rights:

**JD1 Studio**
Email: hi@jd1.co
Website: https://jd1.co

---

By installing JD1 Social Hub, you acknowledge that you have read and understood this Privacy Policy.