CoBuy — Privacy Policy

Version 1.0 — Last updated June 2026

1. Introduction

CoBuy ("we", "our", "us") is a Shopify application that enables social buying and shared discount functionality for online stores. This Privacy Policy explains how we collect, use, store, and protect information when merchants install and use our app.

2. Information We Collect

From Merchants (Store Owners):

• Store information: shop domain, store name, email address
• Product data: product titles, prices, variants (only for CoBuy-enrolled products)
• Order data: order IDs, line items, pricing, shipping addresses, fulfillment status
• Settings and preferences: discount tier configurations, notification settings

From Customers (End Users):

• Name and email address (from order data when participating in CoBuy circles)
• Shipping address (to determine same-address discount eligibility)
• Order references (order number and line items for circle membership tracking)
• Phone number (only when customer explicitly opts in to SMS/WhatsApp notifications)

What We Do NOT Collect:

• Payment card numbers or financial account details
• Social Security numbers or government IDs
• Passwords or authentication credentials for customers
• Browsing history or tracking cookies on customer devices

3. How We Use Information

We use collected data solely to:

• Create and manage buying circles, calculate tier-based discounts
• Apply earned discounts through Shopify's order editing API
• Send notifications about circle progress and discount milestones (with opt-out)
• Provide merchants with circle performance dashboards

4. Data Sharing

We do not sell, rent, or trade personal data.

We do not share, sell, or distribute mobile opt-in data (including phone numbers obtained through SMS/text messaging or WhatsApp opt-in) with any third parties or affiliates for marketing or promotional purposes.

We may share data with:

• Shopify — as required to operate within the Shopify platform
• AWS (Amazon Web Services) — our cloud infrastructure provider
• Legal authorities — only if required by law

5. SMS/WhatsApp Messaging

CoBuy offers optional SMS and WhatsApp notifications to customers who opt in on the order status page.

• Message types: Discount tier updates, circle expiry reminders, and final savings summaries
• Message frequency: Varies based on circle activity
• Message and data rates may apply
• Opt-out: Customers can opt out at any time by replying STOP to any message
• Help: Customers can reply HELP or email support@cobuyapp.com
• Consent is not required to make a purchase — notifications are entirely optional
• No data sharing: Mobile opt-in data (including phone numbers) is never shared with, sold to, or distributed to any third parties or affiliates for marketing or promotional purposes

6. Data Storage and Security

• All data is stored in encrypted databases hosted on AWS
• All data transmission uses HTTPS/TLS encryption
• API tokens and credentials are encrypted at rest
• Access to production systems is restricted to authorized personnel only

7. Data Retention

• Active merchants: Data retained for the duration of app installation
• After uninstall: All store data permanently deleted within 48 hours
• Customer erasure: Personal information anonymized immediately upon request

8. GDPR Compliance

For merchants and customers in the European Economic Area:

• We process data based on legitimate interest in fulfilling orders
• We only collect data necessary for app functionality
• Customers can request access to or deletion of their data
• We respond automatically to Shopify's GDPR compliance webhooks

9. CCPA Compliance

For California residents:

• We do not sell personal information
• Consumers may request disclosure or deletion of data collected
• We do not discriminate against consumers who exercise their rights

10. Cookies and Tracking

CoBuy does not place cookies on customer devices. We do not use third-party tracking pixels or analytics on customer-facing pages.

11. Children's Privacy

CoBuy is a business-to-business tool. We do not knowingly collect data from children under 13. If we learn that we have, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app interface.

13. Contact Us

For privacy-related questions or data requests:

Email: support@cobuyapp.com

Company: Vyasa Technology Solutions, LLC

Website: cobuyapp.com