Expandly — Privacy Policy

Last updated: 12 September 2026

Expandly is a Shopify app that adds conversion elements to a storefront: quantity breaks, bundles, a free gift at a threshold, delivery estimates, badges, a cart drawer and a few more. This page explains what the app stores, what it does not, and who else can see any of it.

The short version: Expandly holds no personal data about your shoppers. It keeps one record per shop, the login that lets it talk to Shopify on your behalf, and nothing else.

What we store

One row per installed shop, in our database:

• the shop's myshopify.com domain
• the access token Shopify issues at install, and the permissions it covers
• the timestamps that token needs so it can be refreshed

That is the whole record. It exists so the app can read and write your own settings through Shopify's API when you open it.

What we do not store

• No shopper names, e-mail addresses, phone numbers, delivery addresses or order histories.
• No payment details of any kind. Expandly never touches checkout or card data.
• No copies of your products, prices or inventory.

Your offer rules (which products bundle together, which quantity tiers apply, which gift unlocks at which threshold) are stored by Shopify, on your shop, in an app-reserved metafield namespace. They stay on your side. When you uninstall the app, Shopify removes them; that cleanup runs in the background and can take a while.

What runs in your shoppers' browsers

Expandly adds a small script to your storefront through Shopify's theme app extension system. It reads the page and the cart in order to show the elements you have enabled, and it sends nothing back to us. We set no cookies and run no analytics or advertising code.

One feature stores something locally: Recently viewed keeps a short list of product handles in the visitor's own browser, so it can show them again. That list:

• is written only when your shop's consent banner reports that storage is allowed;
• never leaves the visitor's browser and is never sent to us or to anyone else;
• is erased if consent is withdrawn.

If your shop has no consent banner configured, Shopify reports consent as granted and the feature works as it always has.

Who else can see any of this

• Shopify, because the app runs on their platform and every read and write goes through their API. Their handling of your data is governed by your agreement with them.
• Fly.io, who host the app and the database it runs on. The database is not reachable from the public internet.

That is the full list. We do not sell data, we do not share it with advertising networks, and we use no third-party analytics.

How long we keep it

The shop record lives as long as the app is installed. When you uninstall, Shopify notifies us and the record is deleted. When Shopify sends a shop/redact request, every row we hold for that shop is deleted.

Requests about personal data

Shopify requires every app to answer three requests. Expandly answers them honestly:

• A shopper asks what data you hold about them. We hold none, so there is nothing to hand over.
• A shopper asks you to erase their data. We hold none, so there is nothing to erase. We do not write the shopper's identifier into our logs either, because that would create exactly the record the request is about.
• A shop asks to be erased. We delete every row we hold for that shop.

Your rights

If you are in the EEA or the UK, the GDPR gives you the right to ask what we hold, to have it corrected or erased, and to complain to your supervisory authority. Because the only record we hold is your shop's login, most of these are answered by uninstalling the app, which deletes it.

Who operates Expandly

Expandly is published by ARTEMIS DIGITAL SRL, Romania, the company that holds the Shopify Partner account for the app.

Contact

Questions about this policy, or any request under it: office@krea.ro

Changes

If this policy changes we update the date at the top. For anything that affects what we store, we also say so on the app's App Store listing before the change takes effect.