Privacy Policy

Version 1.3 · Updated 15 October 2026

This Privacy Policy describes how Soldio (the "App") processes personal data in connection with merchants' use of the App on Shopify.

It also describes, in the section "soldio.com visitors", how we process personal data about people who visit soldio.com, the website where we show clearance deals from merchants who use the App.

Company details

• Operator: SOLDIO PTE. LTD. (Singapore)
• Registered address: DUO Tower, 3 Fraser Street #04-23A, Singapore 189352
• Privacy contact email: support@soldio.com

Data Protection Officer

As required by the Singapore Personal Data Protection Act 2012, we have designated a Data Protection Officer responsible for ensuring our compliance with that Act. You can contact our Data Protection Officer at support@soldio.com.

Roles

Our role depends on the data:

• For merchant customer personal data — the order-derived data the App processes to calculate campaign metrics — the merchant is the data controller and SOLDIO PTE. LTD. is a processor, processing it only as needed to provide the App's functionality. The Data Processing Addendum governs this.
• For merchant relationship data — the shop domain, admin user name and email provided by Shopify at authentication, contact email, diagnostic and usage data, support conversations, and records of terms acceptance — SOLDIO PTE. LTD. is the controller, because we determine why and how that data is used.
• For soldio.com visitor data — what we process when people visit soldio.com, described in the section "soldio.com visitors" — SOLDIO PTE. LTD. is the controller.

Where we act as controller, we process that data to operate and secure the App, to communicate with you about your campaigns and account, to answer your support requests, to diagnose faults, to understand where merchants get stuck setting up the App, and to keep records of agreement to our terms. Our legal basis is the performance of our contract with you and our legitimate interest in operating and securing the service. You may contact us at support@soldio.com to access, correct or delete that data, and — if you are in the European Economic Area or the United Kingdom — you have the right to lodge a complaint with your local supervisory authority.

What data we process

Merchant account information. When a merchant installs the App, Shopify provides authentication and session information, which may include the shop domain and admin user profile details (such as name and email).

Order data. To attribute sales to clearance campaigns and calculate performance metrics, the App processes limited order information, including:

• Order identifier and timestamp
• Order currency
• Product identifier (to link orders to campaigns)
• Quantity and revenue for campaign products
• Whether the order came through soldio.com, and the purchase reference described in the section "soldio.com visitors"

We do not store customer names, email addresses, phone numbers, or shipping addresses.

Storefront visitors. The App displays campaign widgets on the storefront using a Shopify Theme App Extension. These widgets read product-level data only and do not collect any visitor personal information.

Usage data. To understand where merchants get stuck setting up the App, we record which setup steps a store has reached — for example opening the App for the first time, publishing a first campaign, or adding the storefront widget — together with when each step was first and last reached. This is keyed to the shop domain. It does not include storefront visitor or customer personal data and is not used for advertising.

Support conversations. The App includes a support chat, which loads whenever you open the App. Each time, the App shares your shop domain, store name and the store's contact email with our support chat provider so that we know which store is writing, and the chat records technical information about your browser and device, and your approximate location (country, region and timezone, worked out from your IP address). If you write to us, your messages, and anything you include in them, are stored by that provider so that we can reply. The App itself sends the provider no storefront visitor or customer personal data.

Diagnostic data. We use Sentry to monitor errors and diagnose faults in the App's admin interface. This consists of error reports and browser information, including the sequence of screens and setup steps visited shortly before an error. We do not record admin sessions. This data is processed by Sentry (United States) and does not include storefront visitor or customer personal data.

Why we process data

• To provide clearance campaign functionality (pricing, campaign state, storefront widgets)
• To calculate campaign performance metrics (units sold, revenue)
• To operate, secure, and diagnose faults in the App
• To answer questions and support requests you send us
• To comply with legal obligations and Shopify platform requirements

Data minimization

We process and store only the data necessary to provide the App's functionality. We do not use merchant customer data for advertising or any unrelated purpose.

Data retention

We retain campaign data while the merchant has the App installed.

When you uninstall the App, your settings and sessions are deleted immediately and your campaigns stop running. Your campaigns and order records are deleted when Shopify sends us the shop redaction request, which usually follows about 48 hours after uninstall.

Usage data is kept after that point in anonymised form: the shop domain is replaced with a random identifier and the timestamps are removed, so the records can no longer be linked to your store. We use them only to understand how stores move through setup.

Support conversations are not deleted when you uninstall the App. We keep them so that we can refer back to them if you contact us again. Ask us at support@soldio.com and we will delete them.

Data deletion and data subject rights

The App supports Shopify's mandatory privacy compliance processes for customer data requests, customer data deletion, and shop data deletion. Merchants can also contact us at support@soldio.com for data-related requests.

soldio.com visitors

soldio.com is a website operated by SOLDIO PTE. LTD. that shows clearance deals from merchants who use the App. This section covers the personal data we process when you visit it. For this data SOLDIO PTE. LTD. is the controller, except for the purchase reference described below, which reaches us as part of a merchant's order data.

No account and no cookies of our own. You do not sign up or log in to use soldio.com, and it does not ask for your name, email address or any other contact details. soldio.com does not set cookies of its own or store anything in your browser to recognise you.

Hosting. soldio.com is hosted by Vercel, Inc. (United States). As with any website, each request your browser makes carries your IP address, information about your browser and device, and the address of the page you asked for. Vercel uses this to deliver soldio.com to you and to protect it.

Analytics. We use Vercel Web Analytics and Vercel Speed Insights to count visits and to measure how quickly pages load. For each page you view they record the page address (on search results this can include the words you searched for), the website that linked you to it, your approximate location (country, and for visit counts also region and city), your browser, operating system and type of device, how quickly the page loaded, your connection speed and which part of the page was measured. They do not place cookies on soldio.com. To tell one visitor's page views apart from another's, Web Analytics uses a value calculated from your request, which is discarded after 24 hours. We see these results only as totals, such as the number of visits to a page, and we do not use them for advertising. Our legal basis is our legitimate interest in understanding how soldio.com is used and keeping it fast.

Buying a deal. soldio.com does not sell anything itself, and has no cart or checkout. When you choose to buy a deal, soldio.com opens the merchant's own store in a new tab, at that store's checkout with the item already added. The link to the store carries two things: a marker saying you came from Soldio, and a reference made up of random characters that your browser creates at the moment you click. The reference is not linked to you, your device or anything else we hold, and soldio.com keeps no copy of it. Your browser may also tell the store that you arrived from soldio.com (the site, not the page you were on). Links inside a merchant's product description go wherever the merchant pointed them and carry neither the marker nor a reference.

If you complete the purchase, the reference is saved with your order in the merchant's store, where the merchant can see it. The merchant's store then sends us the order information described under "Order data" above, together with the reference, so that we can tell which sales came through soldio.com. We keep the reference with that order information and delete it with it, as described under "Data retention". When the order reaches us, our server logs also record the reference and the name of the website your visit to the store came from, such as soldio.com. We do not store your name, email address, phone number or shipping address.

Your purchase, payment, delivery and any returns take place on the merchant's store, which runs on Shopify, and are handled by the merchant under the merchant's own privacy policy. Questions about your order, or about the personal data used to fulfil it, are best sent to the merchant.

Your rights. You can contact us at support@soldio.com to ask about personal data we hold about you as a visitor to soldio.com. Because the analytics we see are totals and the purchase reference is random, we usually cannot link either of them to you, and we will tell you what, if anything, we can find. If you are in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with your local supervisory authority.

Where we process data

SOLDIO PTE. LTD. is established in Singapore and is not established in the European Economic Area or the United Kingdom.

Most data is processed and stored outside Europe, in the United States. This covers application hosting and the database, error monitoring and diagnostics, and transactional email. Support conversations are the exception: they are processed mainly in the European Union. The providers used for each are named on the Subprocessors page at legal.soldio.com/legal/subprocessors, which is kept current.

Where personal data of individuals in the European Economic Area or United Kingdom is transferred outside those regions, we rely on appropriate safeguards as described in the Data Processing Addendum.

Subprocessors

We use third-party subprocessors and other service providers to provide the App. Both are listed on the Subprocessors page at legal.soldio.com/legal/subprocessors, which is kept current.

Changes

We may update this Privacy Policy from time to time. The version and effective date shown with this document indicate which version is currently in force.

Contact

Contact us at: support@soldio.com