SalePilot is a Shopify app that schedules sale prices to start and end automatically, and restores the original prices afterwards. This policy explains exactly what it stores, why, and for how long.

Who we are

SalePilot is operated by Boldnsmart (boldnsmart.com), based in Lithuania, which acts as the data controller for the data described in this policy. Lithuania is in the European Union, so the GDPR applies. You can reach the controller at [email protected].

What we do not collect

SalePilot stores no personal data about your customers. It never reads or retains shopper names, email addresses, phone numbers, shipping addresses, payment details or customer IDs. Its record of what a sale changed contains product and variant identifiers and prices only — never a customer identifier. Where SalePilot stores order data, as described below, that data is identified by order ID and order number, not by any customer identifier.

The SalePilot app contains no analytics, advertising or tracking scripts, and sets no cookies beyond the session cookie Shopify itself requires to keep you signed in to the embedded app.

This website counts page visits with PostHog (EU), with no cookies and no personal profiles.

What we store

  • Your store's domain — to associate your sale events with your shop and no one else's.
  • Your Shopify staff account details, as provided by Shopify when you install and sign in: your name, email address, locale, Shopify user id, and whether you are the account owner or a collaborator.
  • Access and refresh tokens issued by Shopify. These let the scheduler end a sale on time when nobody is signed in. They are credentials, not personal data, and are never shared.
  • The sales you configure — names, start and end times, time zone, discount rules, and announcement bar text.
  • A record of every price change made — product id, variant id, the original price and the sale price. This is what makes prices restorable, and it is the reason a sale can be undone exactly.
  • Scheduler run logs — timestamps and counts, used to confirm the scheduler is still running.

Order data (when you grant the orders permission)

If you grant SalePilot the read_orders permission, it receives Shopify's order-created and refund-created webhooks and stores, per order: the Shopify order ID and order number, order date, currency, merchandise subtotal, and, per line item, the product and variant IDs and titles, quantity and line total, whether a SalePilot discount or sale price applied, and any refund amounts. It reads the discount titles on an order to recognise which of them are its own, but does not store discount titles.

This lets you see which orders and how much revenue came through a SalePilot sale event, and compare a sale period with the period before it. SalePilot does not store any customer name, email address, phone number, shipping address, payment details, IP address or customer ID as part of this order data.

Order data is kept while the app is installed, and is erased on uninstall along with everything else described in this policy. If Shopify sends a customer redaction request naming a particular customer, we delete the order rows that request identifies.

Why we store it

Solely to provide the service: to apply your sale at the time you chose, to restore your original prices afterwards, to show you what happened, and — where you have granted the orders permission — to show which orders and revenue came from a sale event. We do not sell data, and we do not use it for advertising or profiling.

Where it is stored

Data is held in a PostgreSQL database hosted by Neon in the European Union, and the application runs on Railway. Both act as processors on our behalf. Order data described above is held in the same Neon database. Product and price data is also read from and written to Shopify through their Admin API.

How long we keep it

When you uninstall SalePilot, Shopify notifies us and we erase your store's data — every sale event, discount rule, price record, order record described above, and announcement bar, along with your session. Shopify sends this notification 48 hours after uninstall, so erasure happens then rather than instantly.

Your rights

If you are in the EEA or UK you have the right to access, correct, export, restrict or erase your personal data, and to object to its processing. Because SalePilot holds so little, uninstalling the app already triggers erasure of everything tied to your store. For anything else, email [email protected] and we will respond within 30 days.

Requests that Shopify forwards on a shopper's behalf (customers/data_request and customers/redact) are answered automatically. For most shops there is no shopper data to return or erase; where you have granted the orders permission, a customers/redact request causes us to delete the order rows it identifies.

For order data, we act as a processor on your behalf and you remain the controller of your customers' data — our legal basis for holding it is your legitimate interest, as the merchant, in measuring your own sales.

Changes

If this policy changes materially we will update the date at the top of this page. Continued use of the app after a change means the updated policy applies.

Contact

Questions about this policy or about your data: [email protected].