Privacy Policy

Introduction

LimeForge ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify apps, including Wraply, AgeVerify, and MinimumCart, and visit our website at limeforge.app.

By using our services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

Information We Collect

Information You Provide

• Account information (email address, store name) when you install our apps
• Contact information when you reach out to our support team
• Payment information processed securely through Shopify's billing system

Information Collected Automatically

• App usage data and analytics (for Pro users of AgeVerify)
• Device information and browser type
• IP address and general location data
• Cookies and similar tracking technologies

Wraply Specific Data

Our Wraply app collects the following data to provide gift wrap, gift message, and gift receipt services:

• Merchant settings: enabled wrap options, prices, gift message preferences, and widget styling
• The Shopify GID of the hidden "Wraply Gift Wrap" product and its variants (used to identify gift wrap line items on orders)
• Subscription plan (Free or Pro) as reported by Shopify Billing

End-customer data collected by Wraply. Wraply collects anonymous storefront analytics: widget impressions, wrap option selections, message-added events, gift receipt requests, and device type (desktop / tablet / mobile). Wraply does not collect, transmit to LimeForge servers, or store gift message text, customer names, emails, addresses, or payment information. Gift message content travels only between the customer's browser and Shopify's order record.

AgeVerify Specific Data

Our AgeVerify app collects the following data to provide age verification services:

• Visitor verification responses (yes/no or date of birth confirmation)
• Anonymous verification statistics (pass/fail rates)
• Session data to remember verified visitors (optional feature)

Important: AgeVerify does not collect, store, or transmit actual birth dates or personal identification documents. The "Remember visitors" feature uses anonymized session tokens only.

MinimumCart Specific Data

Our MinimumCart app collects the following data to provide minimum order enforcement:

• Store information: Your Shopify store domain, store name, and email address (provided by Shopify during app installation)
• Rule configuration: The minimum order rules and display settings you create within the app
• Analytics events (Pro plan only): When customers interact with the progress bar on your storefront, we record the event type (bar shown, checkout blocked, items added, purchase completed), cart value and minimum value at the time, device type, and customer tag if a tagged rule matched
• Activity logs: Administrative actions (rule created, settings changed, plan changed) for audit purposes

Important: MinimumCart does not collect customer names, email addresses, personal identification, payment information, browsing history, or product-level cart details (only the total cart value).

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our apps and services
• Process transactions and manage subscriptions
• Send you technical notices and support messages
• Respond to your comments and questions
• Analyze usage patterns to improve user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations

Data Sharing and Disclosure

We do not sell, rent, or share your personal information for advertising or any other purpose outside what is necessary to operate the service. We may share information in the following circumstances:

• Sub-processors: Named third-party service providers listed below who assist in operating our services
• Legal Requirements: When required by law or to respond to legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us permission to share

Sub-processors

LimeForge uses the following third-party service providers to operate the service:

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL)
• Secure data storage with access controls
• Regular security assessments and updates
• Limited employee access to personal data

Data Retention

We retain your information for as long as your account is active or as needed to provide you services. When you uninstall our app, we will delete your data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

Shopify Privacy Webhooks Compliance

LimeForge complies with the data privacy webhooks required by the Shopify Partner Program:

• customers/data_request — When a merchant or end customer requests a copy of personal data, LimeForge responds within 30 days. Wraply collects no personally identifiable end-customer data, so most responses confirm that no such data exists in our systems.
• customers/redact — When Shopify notifies us that an end customer has been redacted, we delete any associated analytics records linked to that customer within 30 days.
• shop/redact — 48 hours after a shop uninstalls Wraply and Shopify confirms redaction, we permanently delete all data associated with that shop, including settings, wrap options, analytics events, and session records.

Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your data
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@limeforge.app.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

Children's Privacy

Our services are intended for use by business owners and are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

Cookies

LimeForge's admin dashboard uses session cookies provided by Shopify to authenticate the embedded app. The Wraply storefront widget does not set tracking cookies or use third-party analytics services on the customer-facing storefront. For full details, see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.