FeedGrid
Privacy Policy
This Privacy Policy describes how FeedGrid ("we", "us", or "our") collects, uses, and protects information when you use the FeedGrid Shopify application ("the Service"). We are committed to protecting your privacy and handling your data responsibly.
1. Who We Are
FeedGrid is a Shopify application that enables merchants to display their Instagram and TikTok feed content on their storefront. For privacy enquiries, contact us at [email protected].
2. Information We Collect
We collect only the minimum data necessary to provide the Service:
| Data | Purpose | Storage |
|---|---|---|
| Shopify shop domain | Identify your store and deliver the correct feed | Cloudflare D1 database |
| Shopify access token | Read product data for shoppable post features | Shopify session storage in Cloudflare D1 |
| Instagram access token | Fetch your Instagram feed on your behalf | Encrypted in Cloudflare D1 |
| TikTok access token | Fetch your TikTok video list on your behalf | Encrypted in Cloudflare D1 |
| Social media post metadata | Display your feed on your storefront (image URLs, captions, timestamps) | Cloudflare KV cache and D1 post library |
| Feed display settings | Remember your layout preferences | Cloudflare D1 database |
| Subscription plan status | Determine which features are available to your account | Cloudflare D1 database |
| Shop contact email, review-email preference and delivery history | Send an optional review request after you opt in, honor unsubscribe requests and avoid duplicate messages | Cloudflare D1; Resend processes email delivery |
We also record aggregate feed impressions and post/product clicks to provide merchant analytics. These events do not include customer names, email addresses or order details. The marketing website uses Cloudflare Web Analytics to understand page usage.
3. How We Use Your Information
We use the data we collect solely to:
- Authenticate your store and social media connections
- Fetch and cache your social media feed content
- Display your feed on your Shopify storefront
- Manage your subscription and billing through Shopify
- Refresh social connection tokens where supported by the platform
- Respond to support requests you send to us
- Send an optional, neutral review request to your Shopify shop contact email when you have explicitly opted in
Review emails are optional. You can turn them off in the app or use the unsubscribe link in the email. Reviews are not rewarded, and your choice does not change your access or support. We keep delivery and suppression records to prevent repeated messages and honor your preference.
We do not sell or rent your data. Our email provider processes contact and delivery information to send messages on our behalf.
4. Third-Party Services
The Service integrates with the following third-party platforms. Your use of these integrations is also subject to their respective privacy policies:
- Shopify, storefront platform and billing. Shopify Privacy Policy
- Meta / Instagram, Instagram Graph API for feed retrieval. Meta Privacy Policy
- TikTok, TikTok Display API for video feed retrieval. TikTok Privacy Policy
- Cloudflare, infrastructure provider (Workers, D1, KV, Pages). Cloudflare Privacy Policy
- Resend, email delivery for support notifications and optional review requests. Resend Privacy Policy
5. Data Security
Instagram and TikTok connection tokens are encrypted using AES-GCM before storage in Cloudflare D1. Shopify session credentials are held in the app's Cloudflare D1 session storage. We use HTTPS for service communication and restrict access to application credentials.
6. Data Retention
We retain your data for as long as your store has FeedGrid installed. When you uninstall the app:
- Your account is marked inactive and Shopify sessions are removed when we receive the uninstall event
- Optional review emails are disabled
- Saved settings and content can remain available for reinstallation until a shop-deletion request is processed; cached copies may remain until they expire
We retain review-email delivery and suppression records to avoid duplicates and honor opt-outs. These records are included when we process a shop-deletion request.
7. Your Rights
Depending on your location, you may have rights regarding your personal data including the right to access, correct, or delete data we hold about you. To exercise these rights, contact us at [email protected]. We will respond within 30 days.
If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR). If you are located in Australia, you have rights under the Australian Privacy Act 1988.
8. Shopify GDPR Webhooks
As a Shopify app, we comply with Shopify's mandatory GDPR webhook requirements:
- Customer data request: We do not store personal data about your customers. Requests will receive confirmation of this.
- Customer data deletion: We do not store personal data about your customers. No customer data deletion is required.
- Shop data deletion: We process Shopify's shop redact webhook to delete the merchant record and related stored data, including review-email records.
9. Cookies
The FeedGrid storefront widget does not set any cookies on your customers' browsers. The FeedGrid admin application (accessed via Shopify admin) uses only session cookies required by Shopify's embedded app framework.
10. Children's Privacy
The Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app. The "Last updated" date at the top of this page will reflect when changes were made.
12. Contact Us
For any privacy-related questions, data requests, or concerns, please contact:
FeedGrid
Email: [email protected]