Synexa Holiday Notice is provided by SynexaTech Labs. This policy explains how information is handled when a Shopify merchant installs and uses the app, when an announcement is displayed on a storefront, and when someone contacts us about the app.

1. What the app does

The app lets merchants create and schedule storefront announcements, including holiday messages, shipping-delay notices, temporary closures, reopening messages, and general announcements. It uses a Shopify theme app embed to display the notices selected by the merchant's settings and plan.

2. Information we receive and store

Store and installation information. We process the store's Shopify identifier, .myshopify.com domain, store name when supplied, installation status and timestamps, timezone, and announcement settings. This connects configuration to the correct store and supports scheduling.

Merchant authentication. Shopify supplies authentication and authorization information used to open the embedded app. App sessions can include the shop, session identifier, permission scope, expiry, access or refresh tokens, and, when supplied by Shopify, the signed-in staff member's identifier, name, email, locale, account-owner status and related session attributes. Access and refresh tokens are encrypted by the application before being stored. We do not ask for your Shopify password.

Notice content and settings. We store the internal title, notice type, message, publication state, enable/disable setting, start and end times, colors, priority, and any link label or link URL you enter. Do not put private customer information, credentials, or sensitive personal information in an announcement: notice messages and links are intended for public storefront display.

Subscription information. We store a limited subscription record, including the plan, subscription verification status, relevant billing-period dates, and whether cancellation is scheduled. Shopify handles subscription approval and billing. The app does not collect payment-card numbers.

Support information. If you contact us, we process the contact details, store domain and messages you provide so we can respond. Support correspondence is separate from the app's installation records. Please avoid sending customer lists, order records, passwords, API keys or payment details.

Technical and compliance information. Requests may involve technical information such as an IP address, browser or request metadata, timestamps and error information for delivery, reliability and security. We also retain limited processing receipts for authenticated Shopify privacy events, consisting of an event identifier, event topic and processing time.

3. Storefront visitors and customer records

The announcement feature does not request or store Shopify customer profiles, order histories or payment-card details, and does not include customer-level impression or click analytics. It does not need access to a merchant's customer or order records to display announcements.

Storefront requests pass through Shopify's app proxy. Shopify can include request metadata; we use the request to deliver the store's eligible public announcement configuration rather than build customer profiles. The public configuration excludes merchant authentication credentials and private internal notice titles.

The storefront bar uses browser tab-session storage to remember a notice that a visitor dismisses. The stored value identifies the notice and that it was dismissed, rather than a customer account. If storage is blocked, dismissal can be remembered temporarily in memory. Storefront and Shopify cookies are separately governed by the merchant's and Shopify's notices.

4. Why we use information

We use information to authenticate merchants, connect the app to the right store, save and display announcements, apply schedules and plan limits, verify subscription status, prevent misuse, troubleshoot errors, respond to support and privacy requests, and meet applicable obligations. This app's announcement feature does not include advertising tracking or behavioral profiling.

5. Sharing and service providers

Shopify processes information as part of app installation, authentication, app-proxy delivery, billing and privacy workflows. We also use service providers as needed to host, operate, secure and support the app. They may process information for those functions. We may disclose information where required by applicable law or to address fraud, security incidents or legal claims.

Read Shopify's privacy policy for information about Shopify's own processing. A merchant's privacy notice applies to their store and any separate services or links they choose to use.

6. Retention, uninstall and deletion

We retain app information while it is needed to provide the app and follow Shopify's applicable privacy and deletion requirements, together with applicable legal obligations.

When an authenticated uninstall event is received, the app disables that installation and removes its app sessions. Uninstalling is not a promise that every stored record or backup disappears immediately.

Shopify normally sends a shop-data erasure request approximately 48 hours after uninstall. When a valid request is received for an inactive installation, the app's deletion workflow removes that store's app records and associated notices, settings and subscription mirror. A delayed request must not erase a newer active reinstallation. We handle Shopify's mandatory privacy requests within Shopify's required timeframe, generally 30 days after receipt, subject to any lawful retention exception.

Any app data retained in backups or for legal obligations remains subject to applicable deletion and retention requirements; uninstall does not create an additional right to use that information. Support correspondence and limited compliance receipts are handled separately. Contact us if you need information about a specific record, backup or deletion request.

See Shopify's app privacy requirements for the platform's privacy-request process.

7. Your requests and choices

You can edit or delete notices in the app and uninstall it through Shopify. Depending on applicable law, you may also ask to access, correct, delete, or restrict use of personal information, object to processing, or request a copy of information. We may need to verify your identity and connection to the store before acting on a request. Never send passwords or access tokens for verification.

If you are a store customer, contact the merchant about their customer or order records. We also handle authenticated Shopify customer-data and customer-erasure notifications; the announcement feature does not maintain customer or order datasets to export or erase.

8. Security and international processing

The app uses authenticated merchant access, store-specific authorization, protected app credentials and verified Shopify privacy notifications. No system can guarantee absolute security. Information may be processed where SynexaTech Labs and its service providers operate, subject to applicable data-protection requirements. You can contact us with questions about processing locations and providers.

9. Contact SynexaTech Labs

Use our support request form for privacy questions or requests. Choose General question, use a subject such as Privacy request — Synexa Holiday Notice, and provide your store domain and a contact email you can access. We will use that information to verify and respond to your request. If an email contact is displayed in this site's footer, you may use that channel too.

10. Changes to this policy

We may update this policy when the app or its information practices change. The policy's effective date and version appear at the top of this page. Material changes will be communicated as required by applicable law.