Last Updated: September 2026
1. Introduction
This Privacy Policy describes how Tile Checkout Builder ("we", "us", or "our") collects, uses, and protects personal data when merchants use our Shopify checkout customization application. Our app provides checkout, thank-you page, order status, and post-purchase customization, including content blocks, product upsells, post-purchase funnels, upsell strategies, checkout functions, and A/B testing.
2. Personal Data We Process
2.1 Merchant Data
When you install our app, we collect:
Shop Information: Store domain, currency, locale, timezone, and Shopify plan
Account Information: Name and email address of the account owner (provided by Shopify)
OAuth Tokens: Access tokens for API communication (encrypted at rest)
Billing Information: Subscription plan selection and billing status (payments are processed by Shopify, not by us)
2.2 Customer Data (Processed on Behalf of Merchants)
Our app processes the following customer data during checkout, thank-you, order status, and post-purchase pages to provide customization features. Important: We do NOT store customer personal data. This data is accessed at runtime from Shopify's checkout and order context only.
Customer Email: Used for targeting rules, personalization tokens, and integration lookups — Not stored
Customer Name: Used for personalization tokens (e.g., "Hi John") — Not stored
Customer Phone: Used for personalization on order status pages — Not stored
Customer Tags: Used for VIP targeting and segmentation — Not stored
Customer Order History: Order count and new/returning status used for targeting — Not stored
Shipping & Billing Address: Country, region, city, and postal code used for geographic targeting — Not stored
Cart Contents: Products, variants, quantities, and cart value used for targeting and upsell logic — Not stored
Order Data: Order number, total, confirmation number, tags, and processing date used on thank-you and order status pages — Not stored
Payment Method: Payment type used for checkout function rules — Not stored
Marketing Preferences: Email/SMS marketing acceptance status on order status pages — Not stored
B2B Information: Company name, company ID, location name, and location ID for B2B targeting — Not stored
Recently Viewed Products: Product browsing history used for product recommendations — Not stored
2.3 Analytics Data
We collect anonymized analytics to help merchants understand performance across checkout, thank-you, order status, and post-purchase pages:
Event Data: Block views, interactions, clicks, post-purchase impressions, and offer accept/decline actions (no customer PII)
Revenue Attribution: Add-to-cart and purchase events with product/variant IDs and order values (no customer identifiers)
Session Identifiers: Hashed, non-reversible tokens for A/B testing consistency and post-purchase funnel tracking
Segment Data: Aggregated, anonymized breakdowns by country, device type, currency, market, customer type (new/returning), and traffic source (UTM parameters)
2.4 Product Data
We cache product catalog data to power upsell strategies and recommendations:
Product Cache: Product and variant IDs, titles, prices, images, tags, and availability status — cached and refreshed periodically for performance
Upsell Strategy Results: Pre-computed product lists based on merchant-configured rules
3. Purposes for Processing
We process personal data for the following purposes:
Service Delivery: To render customized content on checkout, thank-you, order status, and post-purchase pages based on merchant configurations
Product Recommendations: To display relevant upsell products using AI recommendations, browsing history, upsell strategies, or merchant-curated selections
Post-Purchase Offers: To present post-purchase upsell and downsell offers and process one-click additions to existing orders
Checkout Functions: To evaluate and apply merchant-configured rules for discounts, payment methods, shipping options, delivery options, and order validation
Analytics: To provide merchants with anonymized insights about content and upsell performance
A/B Testing: To enable merchants to test and optimize content, upsells, and post-purchase funnels
Targeting: To show relevant content based on customer segments, order attributes, geographic location, traffic source, and integration data (as configured by merchants)
Integration Data Enrichment: To query connected third-party platforms for audience membership data used in targeting (see Section 6)
4. Data Retention
We retain data according to the following schedule:
Analytics Events: 90 days
Revenue & Post-Purchase Events: 90 days
Experiment Results: 90 days after experiment completion
Aggregated Statistics: 2 years (for long-term trend analysis)
Product Cache Data: Refreshed periodically; deleted on uninstall
Merchant Account Data: Duration of service + 30 days
Audit Logs: 1 year
After retention periods expire, data is automatically and permanently deleted.
5. Data Security
5.1 Encryption
In Transit: All data transmitted via HTTPS/TLS 1.2+
At Rest: Sensitive data fields encrypted using AES-256
Backups: All backups encrypted before storage
5.2 Access Controls
Role-based access control (RBAC) for staff
Principle of least privilege enforced
Audit logging for all access to personal data
5.3 Image Proxying
When merchants use images in their content blocks, images may be proxied through our servers for rendering purposes. We do not store proxied images beyond the duration needed to serve the request.
6. Data Sharing and Third-Party Integrations
We do not sell, rent, or share personal data with third parties except:
Shopify: As required for app functionality via Shopify APIs, including checkout extensions, post-purchase extensions, and order management
Infrastructure Providers: Cloud hosting (data processing agreements in place)
Legal Requirements: When required by law or to protect our rights
6.1 Merchant-Configured Integrations
Merchants may connect third-party platforms to enable audience-based targeting. When enabled, we query these platforms at runtime using credentials and API keys provided by the merchant:
Klaviyo: Customer email is sent to check list and segment membership
Mailchimp: Customer email is sent to check audience membership and tags
Postscript: Customer phone/email is sent to check SMS subscriber status and keywords
Recharge: Customer identifier is sent to check subscription status
Loyalty Platforms: Customer identifier is sent to check tier, points, and member status
These queries happen in real time and the results are not stored by us. Merchants are responsible for ensuring they have appropriate authorization to use these integrations and that their use complies with the respective platform's terms of service and applicable data protection laws.
7. Your Rights
7.1 Merchant Rights
As a merchant, you have the right to:
Access your personal data
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Withdraw consent at any time
Disconnect third-party integrations at any time
7.2 Customer Rights
Customers should contact the merchant directly for data requests. We will assist merchants in fulfilling customer data requests within 30 days.
8. Automated Decision-Making
Our app uses automated processing in the following ways:
Targeting Rules: Determining which content, upsells, or post-purchase offers to show based on customer attributes, order details, and integration data
A/B Test Assignment: Deterministically assigning customers to experiment variants using hashed identifiers for consistent experiences
AI Product Recommendations: Automatically selecting products to recommend based on cart contents, browsing history, and purchase patterns
Upsell Strategy Evaluation: Evaluating merchant-configured rules to determine which products to display
Checkout Functions: Automatically applying discount, payment, shipping, delivery, and validation rules based on order context
These decisions do not have legal or similarly significant effects. They are limited to content display and product recommendations. Customers can contact the merchant to opt out of personalized content.
9. Data Deletion on Uninstall
When you uninstall our app, we receive a notification from Shopify and automatically delete all data associated with your store within 30 days. This includes all content block configurations, upsell configurations, post-purchase funnels, upsell strategies, experiment configurations, checkout function rules, analytics data, product cache data, integration settings, and shop settings.
For privacy-related inquiries, please contact us at madison@buildwithtile.com.
This privacy policy was last updated in September 2026. We may update this policy periodically. Material changes will be notified via the app interface or email.
