Soldio
Privacy PolicyTerms of ServiceDPASubprocessors
You are reading version 1.1, effective 24 September 2026. This may not be the version currently in force — read the current version.

Privacy Policy

This Privacy Policy describes how Soldio (the "App") processes personal data in connection with merchants' use of the App on Shopify.

Company details

  • Operator: SOLDIO PTE. LTD. (Singapore)
  • Registered address: DUO Tower, 3 Fraser Street #04-23A, Singapore 189352
  • Privacy contact email: support@soldio.com

Data Protection Officer

As required by the Singapore Personal Data Protection Act 2012, we have designated a Data Protection Officer responsible for ensuring our compliance with that Act. You can contact our Data Protection Officer at support@soldio.com.

Roles

Our role depends on the data:

  • For merchant customer personal data — the order-derived data the App processes to calculate campaign metrics — the merchant is the data controller and SOLDIO PTE. LTD. is a processor, processing it only as needed to provide the App's functionality. The Data Processing Addendum governs this.
  • For merchant relationship data — the shop domain, admin user name and email provided by Shopify at authentication, contact email, diagnostic and usage data, and records of terms acceptance — SOLDIO PTE. LTD. is the controller, because we determine why and how that data is used.

Where we act as controller, we process that data to operate and secure the App, to communicate with you about your campaigns and account, to diagnose faults, to understand where merchants get stuck setting up the App, and to keep records of agreement to our terms. Our legal basis is the performance of our contract with you and our legitimate interest in operating and securing the service. You may contact us at support@soldio.com to access, correct or delete that data, and — if you are in the European Economic Area or the United Kingdom — you have the right to lodge a complaint with your local supervisory authority.

What data we process

Merchant account information. When a merchant installs the App, Shopify provides authentication and session information, which may include the shop domain and admin user profile details (such as name and email).

Order data. To attribute sales to clearance campaigns and calculate performance metrics, the App processes limited order information, including:

  • Order identifier and timestamp
  • Order currency
  • Product identifier (to link orders to campaigns)
  • Quantity and revenue for campaign products

We do not store customer names, email addresses, phone numbers, or shipping addresses.

Storefront visitors. The App displays campaign widgets on the storefront using a Shopify Theme App Extension. These widgets read product-level data only and do not collect any visitor personal information.

Usage data. To understand where merchants get stuck setting up the App, we record which setup steps a store has reached — for example opening the App for the first time, publishing a first campaign, or adding the storefront widget — together with when each step was first and last reached. This is keyed to the shop domain. It does not include storefront visitor or customer personal data and is not used for advertising.

Diagnostic data. We use Sentry to monitor errors and diagnose faults in the App's admin interface. This consists of error reports and browser information, including the sequence of screens and setup steps visited shortly before an error. We do not record admin sessions. This data is processed by Sentry (United States) and does not include storefront visitor or customer personal data.

Why we process data

  • To provide clearance campaign functionality (pricing, campaign state, storefront widgets)
  • To calculate campaign performance metrics (units sold, revenue)
  • To operate, secure, and diagnose faults in the App
  • To comply with legal obligations and Shopify platform requirements

Data minimization

We process and store only the data necessary to provide the App's functionality. We do not use merchant customer data for advertising or any unrelated purpose.

Data retention

We retain campaign data while the merchant has the App installed.

When you uninstall the App, your settings and sessions are deleted immediately and your campaigns stop running. Your campaigns and order records are deleted when Shopify sends us the shop redaction request, which usually follows about 48 hours after uninstall.

Usage data is kept after that point in anonymised form: the shop domain is replaced with a random identifier and the timestamps are removed, so the records can no longer be linked to your store. We use them only to understand how stores move through setup.

Data deletion and data subject rights

The App supports Shopify's mandatory privacy compliance processes for customer data requests, customer data deletion, and shop data deletion. Merchants can also contact us at support@soldio.com for data-related requests.

Where we process data

SOLDIO PTE. LTD. is established in Singapore and is not established in the European Economic Area or the United Kingdom.

Data is processed and stored outside Europe, in the United States. This covers application hosting and the database, error monitoring and diagnostics, and transactional email. The providers used for each are named on the Subprocessors page at legal.soldio.com/legal/subprocessors, which is kept current.

Where personal data of individuals in the European Economic Area or United Kingdom is transferred outside those regions, we rely on appropriate safeguards as described in the Data Processing Addendum.

Subprocessors

We use third-party subprocessors to provide the App. The current list is maintained on the Subprocessors page at legal.soldio.com/legal/subprocessors.

Changes

We may update this Privacy Policy from time to time. The version and effective date shown with this document indicate which version is currently in force.

Contact

Contact us at: support@soldio.com