Privacy Policy

Shopify apps

When a merchant installs one of our apps, such as Astraa Events Calendar, Shopify lets the app access only the store data covered by the permissions the merchant approves.

• Store and account data. To keep the app signed in, we store your shop’s domain, the access token Shopify issues to the app, the permissions granted, and, when you use the app from your Shopify admin, basic details of the staff account using it, such as name, email address and language.
• Events and products. Astraa Events Calendar reads and writes products, inventory, event entries and, when you set an early bird price, discounts in your store so you can create events and sell tickets for them. This content is stored in your Shopify store, not on our servers, and event details you choose to publish are shown on your storefront.
• Customer data. Astraa Events Calendar can read your orders and customers so it can show who bought tickets for each event. It reads the buyer’s name, email and ticket quantity from Shopify only when you open an event’s attendee list or export it, and does not store this information on our servers.
• Emails to ticket holders. A merchant can email everyone who bought a ticket for an event, for example when its date changes or it is cancelled, and can turn on a reminder email sent the day before each event. For these emails the app reads the buyers’ email addresses from the store’s orders at the moment of sending and passes them to our email provider, Resend, which sends them in the store’s name with replies going to the store. We do not keep a list of recipients: we store only whether reminders are turned on and which event dates have been reminded, with no names or email addresses. These emails are only about tickets the customer bought and are never used for marketing.
• Waitlist sign-ups. When an event sells out, a shopper can join its waitlist on the merchant’s store by entering their email address and, optionally, their name and how many spots they want. We store these details on our servers so the merchant can see the waitlist and export it, and so the app can email the shopper on the merchant’s behalf: once to confirm they joined, and again when spots open. These emails are sent in the store’s name through our email provider, Resend, and each one has a link to leave the waitlist. The details are used only for that event’s waitlist, are visible only to that store, and are never used to market our own products. The merchant can remove an entry at any time, and we delete a shopper’s entries when they leave the waitlist or when Shopify forwards a deletion request for them. Otherwise we delete every waitlist entry automatically 30 days after its event ends (or a year after sign-up if the event has no date).
• Private event requests. A merchant can add a form to their store where a customer asks for a private event, such as a party or a team booking. The customer enters their name and email address and, optionally, their phone number, preferred date, group size, occasion and a message. We store these details on our servers so the merchant can see and follow up on the request in the app, and we email the request to the store, with replies going to the customer, and send the customer a copy as a receipt, both through Resend. The details are visible only to that store and are never used for marketing. The merchant can delete a request at any time, and we delete a customer’s requests when Shopify forwards a deletion request for them. Otherwise we delete each request automatically 180 days after it was sent, or 180 days after the date asked for if that is later.
• Check-ins. When a merchant scans a ticket’s QR code at the door, we record which order was checked in, for which ticket and, for a course, which date, how many tickets, when, and which staff account scanned it, so the merchant can see who has arrived. These records hold no names, email addresses or phone numbers. The QR code a buyer sees on their order confirmation and order status pages encodes only the order and its confirmation number, and is generated in their browser without any third party. We delete a customer’s check-ins when Shopify forwards a deletion request for their orders.

We use this information only to provide and support the app for your store, and we do not sell it or share it except with the service providers that host the app. When you uninstall the app, we delete the store and account data above from our systems, and Shopify’s shop deletion request 48 hours later removes the store’s waitlist sign-ups, private event requests, saved venues and check-ins too. Products you created stay in your store until you delete them. We also respond to data requests that Shopify forwards to us on behalf of merchants and their customers.