Privacy policy

CurrencyCraft by Digital Heroes · Creator: Divyansh Singh · Updated 18 October 2026

Digital Heroes operates CurrencyCraft to help merchants configure currency switching and price display in Shopify. This policy describes the prepared app implementation; it does not claim a separate registered CurrencyCraft company.

Information and purposes

• Store domain, base currency, market/currency settings, merchant rules, manual rates, rounding and theme preferences are processed to configure the service.
• Shopify authentication sessions can include authorized staff user ID, name, email, locale and access/refresh tokens. These are used for app authentication and authorized Shopify operations, and require secure deployment/storage. They are not shopper customer records.
• The storefront keeps selected currency/country and dismissed-notice preferences in local browser storage, and session-only display/theme-sampling markers in session storage. Browser settings can clear these values.
• Optional interaction collection is disabled by default on the server. If deliberately enabled, the runtime checks Shopify analytics consent and sends only event type, currency, two-letter country and timestamp, with optional theme colours. Events have no shopper identifier, email, name, address, payment data or cross-site identifier. Server ingestion requires an explicit affirmative consent flag.
• This launch does not ingest order webhooks for analytics or store shopper orders/customer profiles. Received customer compliance payloads are authenticated and acknowledged without retention or logging.
• Infrastructure processes technical request information needed to deliver and secure the service. We do not claim such processing is free of personal information.

Providers and sharing

Shopify receives authentication/API requests and remains responsible for the store's native checkout. Hosting provider: Cloudflare (Workers and isolated container). Database provider: Supabase Free (PostgreSQL). Processing region: Cloudflare container: eastern North America; Supabase: us-east-1 / East US (North Virginia); edge processing may occur globally.

Exchange-rate providers receive server requests for currency/rate data rather than shopper identity. Support correspondence is processed to investigate requests, respond, and maintain relevant issue records. Records are retained according to the unresolved request, legal needs and necessary follow-up rather than an invented fixed period. Infrastructure-provider retention and international processing depend on the selected deployment and must be verified before publication.

Retention and deletion

Store configuration and merchant sessions are retained while providing the installed app. A verified uninstall or shop-redaction delivery atomically deletes store-owned configuration, currency/rule/rate/event rows and merchant sessions. Database relations cascade the store deletion; repeated delivery is safe. Data already held by Shopify remains subject to Shopify's and the merchant's policies.

If optional analytics are enabled, the app prunes events older than 30 days for that store before accepting further events. This is cleanup during ingestion, not a claim that a scheduled retention job is running. Without further traffic, scheduled/manual deletion must be arranged; uninstall and shop redaction still purge those rows.

No scheduled operator-managed backups, guaranteed recovery time or finite backup-expiry promise has been established for this prepared release. Provider-held copies and technical records must be considered when fulfilling deletion and before restoring any backup; previously completed deletions must be replayed after a restore.

Requests and choices

Contact support@digitalheroes.co.in for access, correction, deletion or privacy questions. Include the store domain and request type, not passwords, API secrets, payment details or bulk customer exports. We verify requester authority and cooperate with the merchant. Shopify compliance requests are handled within Shopify's required process; customer-linked records are not stored by this launch.

Currency switching works without enabling optional analytics. Declining analytics must not disable the currency display service. We do not sell shopper data or use these events for advertising profiles. Changes to data collection, providers or protected Shopify resources require a policy and permission review.