Jelliby GTM Tracking ("the App") is a Shopify application developed by Jelliby ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect information when you install and use our App.
2. Information We Collect
When you install and use the App, we collect and store:
Shop information: Your Shopify store domain, used to associate your configuration with your store.
GA4 credentials: Your Google Analytics 4 Measurement ID and API Secret, which you voluntarily provide to enable tracking functionality.
Session data: Authentication session information required by Shopify to keep you logged into the App.
3. Information We Do NOT Collect
We do not collect or store personal data from your customers.
We do not collect payment information, addresses, or other personally identifiable information (PII) from end users.
Ecommerce event data (page views, add to cart, purchases) is processed in real-time and forwarded directly to Google Analytics. We do not store this data.
4. How We Use Information
The information collected is used exclusively to:
Authenticate your Shopify store and maintain your session within the App.
Forward ecommerce events (purchases, refunds) to Google Analytics 4 using the Measurement Protocol on your behalf.
Configure and manage your Google Tag Manager and GA4 integration.
5. Data Sharing
We do not sell, trade, or share your data with third parties. The only data transmission is to Google Analytics 4, as explicitly configured by you through the App.
6. Data Retention and Deletion
Your GA4 credentials and session data are stored for as long as the App is installed on your store.
When you uninstall the App, all session data is automatically deleted.
When Shopify sends a shop redaction request, all data associated with your store (credentials and sessions) is permanently deleted.
You can request data deletion at any time by contacting us.
7. Data Security
We implement appropriate security measures to protect your data, including:
GA4 API secrets are stored server-side only and never exposed to the client.
All webhook communications are validated using HMAC signatures.
The App uses Shopify's official authentication libraries.
8. GDPR Compliance
We comply with the General Data Protection Regulation (GDPR) and handle all mandatory Shopify webhooks for:
Customer data requests
Customer data erasure (redaction)
Shop data erasure (redaction)
9. Contact Us
If you have any questions about this Privacy Policy or wish to request data deletion, please contact us at:
Email: privacy@jelliby.tech
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.