Privacy Policy for PixelTrue

Last Updated: August 2026

PixelTrue ("we", "our", or "us") respects your privacy and is committed to protecting the personal data of our users and their customers. This Privacy Policy outlines how we collect, use, process, and protect data when you use the PixelTrue Shopify App (the "App").

This policy is designed to comply with the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Shopify’s Partner Program Agreement requirements.

1. Information We Process

To provide our server-side tracking service (Conversions API), the App processes certain data directly from your Shopify store when a purchase is made.

a. Merchant Data

When you install the App, we collect:

• Shopify Store Information: Store domain, email address, and Shopify plan.
• Configuration Data: Your Meta Pixel ID and Conversions API Token (stored securely).
• Billing Data: Trial status and Shopify App subscription status.

b. Customer Data (End-Users)

When a customer makes a purchase on your store, the App temporarily processes the following order payload data to forward it to Meta (Facebook):

• Customer Email
• Customer Phone Number
• IP Address
• User Agent (Browser Info)
• Order Value and Currency
• Product IDs (Content IDs)

2. How We Process and Protect Customer Data (Zero-Retention Policy)

We do not store your customers' personal data.

Our App acts solely as a data conduit between your Shopify store and Meta’s Conversions API.

1. The App receives the order payload from Shopify via a secure webhook.
2. The App immediately hashes personal identifiable information (PII) such as email and phone number using the industry-standard SHA-256 cryptographic algorithm in memory.
3. The hashed data and order details are transmitted securely to Meta via HTTPS.
4. The data is immediately discarded from our server memory. It is never written to a database, log file, or persistent storage.

3. Data Sharing and Third Parties

The App shares data strictly with the following third party to fulfill its core functionality:

• Meta (Facebook/Instagram): Hashed customer data and purchase events are sent to Meta's Conversions API to improve your ad attribution and Event Match Quality (EMQ).

We do not sell, rent, or trade your data or your customers' data to any other third parties.

4. GDPR and CCPA Compliance

For Merchants

We provide merchants with full control over their data. If you uninstall the App, we automatically receive a Shopify webhook (app/uninstalled) which instantly purges all your Merchant Data and Meta configuration credentials from our active database.

For End-Users (Customers)

Under the GDPR and CCPA, your customers have the right to request access to or deletion of their personal data. Because PixelTrue operates on a Zero-Retention Policy, we do not hold any personal customer data to provide or delete. When you submit a mandatory Shopify GDPR webhook request (customers/data_request or customers/redact), our App will acknowledge the request, but no action is required on our end as no data is stored.

5. Security Measures

• All data transmissions between Shopify, our servers, and Meta are encrypted using Transport Layer Security (TLS/HTTPS).
• Meta API tokens are stored securely and used exclusively to authenticate requests for your specific pixel.
• Our infrastructure is hosted on secure, enterprise-grade cloud environments (Cloudflare Workers) which comply with stringent security standards.

6. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy and, if necessary, via email or an in-app notification.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@pixeltrue.app