Privacy policy
ThanksTo: Sales Attribution · Last updated November 1, 2026
ThanksTo is a Shopify app that shows a merchant which posts, creators, discount codes and AI chats lead to their sales. This policy explains what the app collects from a store that installs it, why, how long it is kept and how it is deleted. "We" means CleverApps, the operator of ThanksTo; "you" means the merchant who installs the app; "shoppers" means the people who visit your store.
What we collect
We use the minimum data needed for attribution (Shopify's "Level 1" protected customer data).
| From | What |
|---|---|
| Your orders (Shopify webhooks and the Admin API) | Order id and number, totals and refunds in your store currency, discount codes, sales channel, payment status, the titles and quantities of the products bought, the referring site and landing page Shopify recorded (host, path and campaign tags, no other parameters), Shopify's summary of the customer's visits, how many orders the customer has placed, and Shopify's numeric customer id. |
| Your storefront (the ThanksTo web pixel) | Page views, product views, add-to-cart, checkout started and checkout completed events with a visitor id, the page path, the referrer,
campaign tags (utm_*, ref, via and affiliate tags), the type of ad click (for example Google or
Meta, never the click id), browser, operating system and device type, a rough location derived from the IP address (country, region,
city and coordinates rounded to about 1 km), and a one-way hash of the checkout token used to link a visit to its order. The visitor id
is usually Shopify's browser client id, otherwise a random id; it is kept in the shopper's browser storage. IP addresses are used briefly to limit abuse and are not
stored. |
| The cart helper (if you turn on its app embed in your theme) | When the shopper has allowed analytics, the helper writes the visitor id, the ref tag, the ad click id, the
utm_* tags and a timestamp to the cart as attributes, so Shopify stores them on the order. It keeps the last tagged landing
in the shopper's browser storage and uses it for up to 90 days; after that it deletes it on the shopper's next visit. From these attributes we store the visitor id, the ref tag, the
utm_* tags and the type of ad click on our order record; the click id itself stays on the Shopify order. |
| The post-purchase survey (if you add its block to your checkout) | The answer a shopper picks to "How did you hear about us?", any short text they type for "Other" or "Someone else", and the order it belongs to. The survey doesn't ask for the shopper's own name or email. The shopper's IP address is used briefly to limit abuse and is not stored. |
| Your creators | The names or handles you enter, their links and linked discount codes, and their visits, orders and sales. |
| Your shop | Shop domain, name, primary domain, timezone and currency, the shop owner's email (kept for account notices and, if you turn it on in Settings, the weekly digest email, which has an unsubscribe link), and your plan. |
We do not store shoppers' names, email addresses, phone numbers or postal addresses, unless a shopper types them into a survey answer, and the app does not request access to Shopify customer records.
Consent
The web pixel and the cart helper run under Shopify's customer privacy framework. They record a visit when the shopper has allowed analytics under your store's privacy and cookie settings; when they decline, the pixel and cart helper record nothing for that visit. Orders are still received from Shopify, with the referring site, landing page and visit summary Shopify recorded, and we can use these to credit the order.
How we use it
- To credit each order to the visit, creator, discount code or source that brought it in, and to show you these reports.
- To count orders against your plan's monthly limit.
- To keep the app secure and working.
We do not sell data, use it for advertising, or combine it across stores.
Where it is stored and who processes it
Data is stored in a database on Cloudflare (Workers and D1), which hosts the app and sends the weekly digest email. Access tokens for your store are encrypted. Billing is handled by Shopify. If you create a share link for a creator, anyone with that link can see that creator's visits, orders and sales until you revoke it. We do not share store data with any other third party, except when required by law.
How long we keep it
- Raw events (page views and other events) are deleted after 90 days.
- Purchase-matching records are deleted after 120 days, because orders such as cash on delivery can be paid months later.
- Records that join a checkout to its visit are deleted after 2 days.
- Visit sessions are deleted after 400 days. A session credited to an order is kept with that order.
- Order records and survey answers are kept while the app is installed.
Deletion
- When you uninstall ThanksTo, tracking stops right away.
-
Shopify sends us a shop data deletion request (
shop/redact) about 48 hours after you uninstall, and a daily job then deletes all of your store's data. Copies in our host's automatic recovery history expire within 30 days. Order tags and cart attributes already on your Shopify orders stay in Shopify. -
When a shopper asks you to delete their data, Shopify sends us a customer redaction request (
customers/redact), and we delete the visit data, cart details and survey answers linked to that customer's orders and remove their customer id. The order's totals, discount codes and products stay in your reports. - Customer data requests (
customers/data_request) are answered to you, the merchant, within 30 days.
Your rights and shoppers' rights
You can ask us for a copy of your store's data or for its deletion at any time. Shoppers should contact the store they bought from; the store can pass the request to us through Shopify.
Changes
If this policy changes in a way that matters, we'll update the date above and tell installed merchants in the app.
Contact
Email support@thanksto.app.