Privacy Policy

Information we access

When a merchant installs the App via BigCommerce OAuth, we request only the permissions needed to run the sticky bar:

• Content (storefront scripts) - to install the script that renders the bar on your product pages.
• Products - to read product details (title, price, image, variants) so the bar shows the right information. The App does not change your catalogue.
• Carts - for the add-to-cart flow from the bar. The App does not store cart contents.
• Storefront API tokens - to look up the product a shopper is viewing through the BigCommerce Storefront API.

The App does not access orders, customers, or your store's payment data.

Information we store

We store the data required to operate the App, in Google Firebase (Firestore):

• Your store hash and the OAuth access token issued by BigCommerce at install.
• The store user(s) who installed or were granted access to the App (id, email, username).
• Your bar configuration - the styling, layout and behaviour settings you save in the dashboard.
• Your billing record - your Stripe customer ID, subscription status and dates, and whether your store has used its free trial (see Third-party processors).

The App does not collect or store any shopper personal data. The bar runs in the shopper's browser and uses the product information already present on the page.

Third-party processors

• BigCommerce - the platform the App integrates with.
• Google Firebase / Firestore - stores your store record and bar configuration.
• Google Firebase App Hosting - hosts the App and serves the storefront script.
• Stripe - processes subscription billing. Your card details are entered on Stripe's pages and handled by Stripe; we never see or store your full card number.

We do not sell or share your data with advertisers, and we do not use it for any purpose other than operating the App.

Data retention & deletion

When you uninstall the App, BigCommerce notifies our uninstall endpoint and we remove your store record, access token and bar configuration, remove the storefront script, and cancel any active subscription. We keep a minimal billing record (your Stripe customer ID, subscription status and whether the free trial was used) so your billing history stays intact and the free trial is not granted twice. To request deletion at any other time, email us at info@codinative.com.

Security

All traffic uses HTTPS. Access tokens and credentials are stored server-side and are never exposed to the browser or to shoppers.

Contact

Questions about this policy? Email info@codinative.com or visit codinative.com.