Privacy Policy
Mobi-Preorder & Back in Stock (“the app”) is a Shopify app built by MobiDrag (“we”, “us”). It lets a store (“the merchant”) take pre-orders, run pre-order campaigns and email shoppers when a sold-out product is back in stock. This policy explains what the app stores, why, and how to have it removed.
For shopper data, the merchant decides why and how it is used (the merchant is the controller) and we process it on the merchant's behalf. For the merchant's own account details, we are the controller.
What we collect
| Whose | What | Why |
|---|---|---|
| Merchant | Store domain, the access token Shopify issues to the app, and the name and email Shopify shares for a signed-in staff account, if any. | To run the app inside the Shopify admin. |
| Merchant | App settings: sender name, reply-to address, email look, limits and campaign details. | To apply the merchant's choices. |
| Merchant | If the merchant connects Gmail: the Gmail or Google Workspace address and an app password. The password is stored encrypted and is never shown again. | To send emails from the merchant's own address. |
| Shopper | Waitlist signup: email address, the product and variant chosen (and its options such as size), signup time and whether the email was sent. | To email the shopper once when the product is back in stock. |
| Shopper | Pre-order orders: Shopify customer ID, order number, product details, quantity, expected ship date, and the email address only while the store sends through Gmail. | To send the pre-order confirmation and ship-date emails the merchant has turned on. |
| Shopper | Short pre-order holds: variant, quantity and time. No personal details. | To stop more units being held than the pre-order limit. |
| Shopper | Optional click count on the product link in restock emails, only if the merchant turns it on. No IP address or device is stored. | To show the merchant whether emails are useful. |
We do not store shoppers' names, postal addresses or payment details. The app sets no cookies and uses no browser storage on the storefront, and it contains no advertising or analytics trackers.
How we use it
- To provide the features above to the merchant, and nothing else.
- To keep the app secure and working (for example limiting how many emails are sent per day).
- We do not sell personal data, use it for advertising, or use it to build profiles.
Who it is shared with
- Shopify, the platform the app runs on, which provides store, product, inventory and order information to the app.
- Google (Gmail), only when the merchant connects Gmail. Emails to shoppers are sent through the merchant's own Gmail account, so the recipient address and message pass through Google's mail service.
- Our hosting provider, which stores the app's database on servers we operate.
We do not share data with anyone else unless the law requires it.
How long we keep it
- Waitlist entries that have been notified or removed, and the records of sent and failed emails, are deleted after the merchant's retention period (90 days by default; the merchant can set 1 to 3,650 days in Settings). Shoppers still waiting stay on the list until they are notified or removed.
- Pre-order holds are deleted a week after they are settled.
- When the app is uninstalled, Shopify tells us to delete all of the store's data, and we do so.
Your rights
Shoppers can ask the store (or us) to see, correct or delete the data held about them. When Shopify sends us a customer data-erasure request, we delete that customer's waitlist entries, pre-order records and email records. For data access requests, the merchant can export the waitlist from the app. You can also write to us at info@mobidrag.com and we will help; depending on where you live you may also have the right to complain to your data protection authority.
Security
Data is sent over HTTPS. The Gmail app password is encrypted at rest and is write-only: it is never displayed or returned by the app. Access to the servers is limited to people who run the app.
Changes
If we change what the app collects, we will update this page and its date.
Contact
MobiDrag · info@mobidrag.com