Privacy Policy

Climb ("we", "us") is a Shopify app built by 8th Origin LLC that adds a cart drawer, rewards ladder, and automatic discounts to a merchant's storefront. This policy explains what we collect from merchants who install Climb, how we use it, and the choices you have. Climb does not collect or store the personal information of your shoppers.

What we collect

• Store information — your .myshopify.com domain, store name, currency, and locale, provided by Shopify when you install.
• Staff account — the name and email of the staff member who installs or configures Climb, from your Shopify session, used only to authenticate you into the Climb admin.
• App configuration — the drawer settings you choose (reward tiers, colors, text, product selections). This is data you create.
• Aggregate events — anonymous counts only: drawer opens, offer adds, bump adds, reward unlocks, and checkout clicks, used to show you performance. They carry no shopper identity, use no cookies, and are kept for 90 days.

We do not collect, store, or have access to your customers' names, addresses, emails, or payment details. The app does not read your orders. Discounts are applied by Shopify's own checkout using a Shopify Function; Climb never sees payment information.

How we use it

Solely to operate the app for you: render the cart drawer on your storefront, apply the discounts you configure, authenticate you into the admin, and provide support. We do not sell your data or use it for advertising.

Shopify permissions

We limit our Shopify permissions to what the app needs: reading products (to power the product pickers in the studio) and managing discounts (to create and update the automatic discounts you configure).

Sub-processors

We share the minimum necessary with infrastructure providers that run the app: Shopify (platform and APIs), Vercel (application hosting), and Neon (database hosting). Each processes data only to provide their service to us.

External requests

The Climb admin interface loads fonts from Google Fonts. On your storefront, Google Fonts is loaded only if you select a custom font (choosing your theme's own font makes no external font request). Climb makes no other third-party requests from your storefront: no shopper tracking, no ad networks, no third-party analytics.

Retention & deletion

We keep your configuration only while Climb is installed, and aggregate event counts for 90 days. When you uninstall, Shopify sends us a shop/redact request and we delete all stored data for your store (configuration, reward tiers, product selections, and event counts). Because we hold no shopper personal data, the customers/data_request and customers/redact requests return with nothing to disclose or erase.

Security

Data is transmitted over HTTPS and access tokens are stored server-side.

Your choices

You can remove all data we hold at any time by uninstalling Climb from your Shopify admin. For any privacy request, email us and we will respond promptly.

Changes

If this policy changes, we will update the date above and, for material changes, notify installed merchants.

Contact

8th Origin LLC — danny@8thorigin.com