This Privacy Policy explains how we process information when merchants use Etlala. It is written for Shopify Protected Customer Data requirements and App Store review.
1. Who we are
Etlala is a shop-the-look app. Merchants control their stores; we act as a service provider for data needed to run the app.
2. Data we process (minimum necessary)
- Merchant/store identifiers, OAuth tokens, billing status, and look content you create.
- Store owner name and contact email, store time zone, and dashboard language, read from the platform at install.
- Storefront analytics beacons: look views, engagement, add-to-cart (not used to identify shoppers by name), grouped by a random visit id kept in the browser tab’s session storage (not a cookie, not linked to any identity).
- Order attribution, for orders the platform sends us: order id, total, currency, discount codes, product ids, and whether the order came through a look (ETLALA coupon, cart lines added from a look, or multiple look products). Orders not linked to a look are kept with the tier “none”.
We do not request or store shopper name, email, phone, or address for Etlala analytics. We do not sell personal data.
3. Purposes
- App functionality (looks, discounts, widgets).
- Merchant analytics (views, carts, look-attributed orders/revenue).
- Security, abuse prevention, and support.
- Account emails to the store owner: welcome and setup help, trial reminders, a note when Etlala brings the first order, and one feedback question after uninstall.
We do not use shopper data for third-party ads or make automated decisions about shoppers with legal or similarly significant effects.
4. Transparency and agreements
We disclose data use in this policy, marketplace listings, and in-app Analytics. Installing Etlala means you agree to our Terms of Service and this Privacy Policy. Merchants remain responsible for shopper-facing privacy notices.
5. Sharing, retention, security
We may share data with commerce platforms, infrastructure providers (hosting, database, file storage, email delivery) under confidentiality terms, our AI provider (Google Gemini) to create look images and text from the product photos and details the merchant chooses (no shopper data is sent), or authorities when legally required. After uninstall on Shopify, we delete the merchant’s Etlala data when Shopify sends shop/redact, 48 hours later. On Salla and Zid, data is kept for 30 days so a reinstall can restore the looks, then deleted permanently. We use encryption in transit (HTTPS/TLS) and encryption at rest via our providers.
6. Consent, sale, automated decisions
We do not sell personal data. We do not run shopper marketing consent UIs. We do not make legal/significant automated decisions about shoppers.
7. Rights and contact
Request access, correction, or deletion at support@intalaq.com. We honor Shopify GDPR webhooks: customer data request and customer redact (no buyer PII stored); shop/redact deletes merchant Etlala data.