Privacy policy
Last updated October 6, 2026
Mint Store Credit is a Shopify app made by Mint Labs ("we", "us"). It lets merchants issue and take back store credit on Shopify's own store credit accounts, give cashback on paid orders, credit groups of customers and refund orders to store credit. This policy explains what the app handles, why, and when it's deleted. For information about the merchant's customers we act as a service provider (processor) to the merchant, who is the controller.
The short version
- Store credit balances live in Shopify, not with us. The app asks Shopify to add or remove credit and keeps a ledger of what it did.
- The ledger stores the customer's numeric Shopify customer ID with each credit (amount, currency, reason, your note, dates, Shopify's transaction ID). Customer names and email addresses are fetched from Shopify when you look at them in the app and are never stored.
- For cashback, the app reads paid orders from Shopify (items, discounts, refunds, the customer ID and tags). It stores the order ID, order name and the cashback worked out.
- The storefront block is rendered by Shopify from Shopify's data; it sends nothing to us and sets no cookies.
- We never sell or share data, use it for advertising, or combine it across stores.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To read customers and orders, add and remove store credit, create refunds to store credit you confirm, and save the theme block's settings. |
| Store name, primary domain, currencies, time zone, customer account type, app installation ID | Amounts are shown in your currencies, expiry dates end at midnight in your time zone, the home page warns if customers can't use store credit yet. |
| Cashback rules (amounts, tags, product IDs), reasons and settings | To run cashback and the credit form the way you set them up. |
| The staff user ID from the admin session that made each credit | The audit trail in the activity ledger. |
| Plan (Free, Pro or Plus) and its dates | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
Information about the merchant's customers
| What | Details | Kept |
|---|---|---|
| Ledger entries | Customer ID, amount, currency, credit or debit, source (manual, bulk, cashback, refund), reason, the merchant's note, expiry, Shopify's transaction ID and balance after. | While the app is installed (the store's credit history); removed for a customer on an erasure request |
| Cashback orders | Order ID and name, customer ID, the rule used and the cashback worked out. Order contents are read from Shopify when needed, not stored. | While the app is installed |
| Bulk credit lists | Customer IDs per run. Emails from an uploaded CSV are kept only until they're matched to a customer; unmatched rows keep the email so you can see what failed, for 30 days. | 30 days for emails, 400 days for finished runs |
| Names and email addresses | Shown in the app (search, customer pages, ledger, CSV export you download), fetched live from Shopify. | Not stored |
| Customer data requests | When Shopify forwards a customer's data request, a copy of what the app holds about them, for the merchant. | 30 days |
Emails to customers about store credit are sent by Shopify (when the merchant ticks "Email the customer"), not by us. The storefront block shows the signed-in customer's balance using Shopify's Liquid; nothing about the shopper reaches the app.
Customer privacy requests
- Access requests (
customers/data_request): the app collects what it holds about the customer (ledger entries, cashback orders, bulk runs) and shows it to the merchant in Settings for 30 days so they can send it on. - Erasure requests (
customers/redact): the customer ID and notes are removed from the ledger (amounts and dates stay as the store's anonymous credit history), and the customer is removed from cashback orders and bulk runs. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything we hold for the store. Store credit already issued stays in Shopify.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting, database and job queue) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no analytics or trackers. See our security policy.
Retention
The ledger, rules and settings are kept while the app is installed. Access tokens are deleted as soon as the app is uninstalled, and everything else when Shopify sends the store deletion request 48 hours later. CSV emails, data request copies and finished bulk runs are deleted as described above.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly; customers should contact the store, or email us and we'll help. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs: support@stickermint.com