Legal
We built CognixHQ to help merchants grow — not to monetise their data. Here is exactly what we collect, why, and how we protect it.
Last updated: July 6, 2025
CognixHQ ("we", "us", or "our") operates a suite of Shopify apps (collectively, the "Apps"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you install or use any of our Apps. By installing or using any CognixHQ App, you agree to the collection and use of information described in this policy. If you do not agree, please uninstall the App and discontinue use.
When you install a CognixHQ App, we receive access to your Shopify store data as permitted by the OAuth scopes you approve. This may include store URL, merchant name and email, orders, products, customers, and inventory — depending on the specific App.
Our Apps process data about your store's customers (such as names, email addresses, purchase history, and review submissions) solely to provide the service. We act as a data processor on your behalf; you remain the data controller for your customers' data.
We collect anonymised usage data (feature interactions, error logs, performance metrics) to improve our Apps. This data is not linked to individual merchants or customers.
If you contact us via email or through our support channels, we retain that correspondence to respond to your inquiry and improve our support.
We do not sell, rent, or share your personal data or your customers' personal data with third parties for their own marketing purposes.
We share data only as necessary to provide the Apps:
All sub-processors are bound by data processing agreements and are prohibited from using your data for any purpose other than providing the contracted service.
We retain merchant and customer data for as long as your App subscription is active and for up to 90 days after uninstallation, to allow for re-installation and data recovery. After this period, data is permanently deleted from our systems. You may request immediate deletion at any time by contacting us.
We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
If you or your customers are located in the European Economic Area (EEA), we process personal data in accordance with the General Data Protection Regulation (GDPR). We act as a data processor under your instructions. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.
To exercise any of these rights, contact us at hello@cognixhq.com. We will respond within 30 days.
Each CognixHQ App listed on the Shopify App Store complies with Shopify's Partner Program Agreement and API Terms. The privacy policy URL provided on each App listing points to this page. Data access is limited to the scopes explicitly requested during installation.
We may update this Privacy Policy from time to time. We will notify active merchants via email or an in-app notice at least 14 days before material changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
CognixHQ
hello@cognixhq.com