Privacy Policy

Omake Privacy Policy

This policy describes how Craftify Inc. (“we”) handles information in the Shopify app “Omake” (“the App”).

1. Information we collect

For each store that installs the App, we collect and store only:

  • The store domain (e.g. example.myshopify.com)
  • The access token issued by Shopify
  • The granted scopes and their expiry

2. Information we do not collect

The App does not collect or store:

  • Shoppers’ names, addresses, email addresses, or phone numbers
  • Payment information
  • The store’s customer list
  • Names or email addresses of store staff

The App requests permissions to manage products, discounts, and checkout validation, to read the store’s language settings, to read public product listings, to read customers, and to read and edit orders. The permission to read customers (read_customers) is used only by the gift offer shown inside checkout on Shopify Plus stores. While a logged-in shopper is in checkout, the App checks on the spot whether the shopper has the customer tags set in the gift conditions and returns only the matching tags. The App does not store customer tags or any other shopper information.

The permission to read and edit orders (write_orders) is used only to add an order tag to orders that include a gift and to show the gifts added by the App on the order details page in the Shopify admin. The App only checks the gift lines it added; it does not store order contents or any shopper information.

3. How we use it

The stored information is used solely to let the App call Shopify’s APIs in order to:

  • Save and read the gift settings
  • Add the gift to carts that meet the configured conditions
  • Validate the cart at checkout
  • Mark orders that include a gift (an order tag and records in the order’s additional details and line items) and show the gifts on the order details page

4. Where and how long we store it

Data is stored on servers in Japan (Tokyo region).

  • Application: Fly.io (Tokyo)
  • Database: Supabase (Tokyo)

Stored data is deleted when the App is uninstalled from the store. Deletion is triggered by Shopify’s app/uninstalled and shop/redact webhooks.

5. Third parties

We do not sell, rent, or otherwise provide the collected information to third parties. We use the following service providers for hosting and processing:

  • Shopify Inc. (app platform)
  • Fly.io, Inc. (application hosting)
  • Supabase, Inc. (database)

6. Information from support inquiries

When you contact us by email about the App, we receive your name, email address, store name, and the content of your inquiry. We use this information only to respond to you and to support the App, and we do not provide it to third parties.

If you wish to request disclosure, correction, suspension of use, or deletion of this information, please contact us at the address below. We will verify your identity and respond in accordance with applicable law.

7. Security

We take the following measures to prevent leakage, loss, or damage of the information:

  • All communication with the App is encrypted (HTTPS)
  • Access to the database is limited to our authorized staff and the App itself
  • Access tokens are used only for the App’s operation

8. Requests about shoppers

The App holds no shopper personal data. When Shopify sends a data request (customers/data_request) or an erasure request (customers/redact), we record the request and confirm that no such data exists.

9. Contact

Craftify Inc.
Email: support@crafti-fy.jp

10. Changes

We may revise this policy. Material changes will be announced on this page.

Effective date: September 9, 2026
Last updated: September 26, 2026