Invitova Privacy Policy

Last updated October 26, 2026.

Invitova provides free-shipping goals, storefront progress messages, quizzes, share rewards, and a shopper code wallet for Shopify stores. This policy explains what information Invitova processes when a merchant installs or uses the app, or when a shopper interacts with an Invitova feature on a merchant’s storefront.

Information we process

Depending on the features enabled by a merchant, we process:

• Merchant and store information: the Shopify store domain, app installation and subscription status, currency, timezone, and settings saved in Invitova.
• Shopper information: email address, Shopify customer identifier when the shopper is signed in, and marketing-consent choice when a consent option is shown. If a merchant’s sign-up popup asks for them, we also process the name and phone number the shopper chooses to enter; the phone number is always optional. These are shared with that merchant with the sign-up and used to personalise messages. Invitova does not send SMS or make calls.
• Reward information: quiz or survey answers, reward source, issued discount code, issue and expiry dates, and whether a code was used. This lets us issue a reward, display it in the shopper wallet, enforce merchant-configured limits, and prevent duplicates.
• Store and commerce information: the minimum customer, order, cart, discount, and storefront information needed to provide enabled features and create or apply shipping discounts.
• Technical and usage information: timestamps, request metadata, an app-generated browser identifier, and short-lived one-way fingerprints used for security, rate limiting, fraud prevention, troubleshooting, and aggregate feature analytics.

How we use information

We use information to provide and secure Invitova; save merchant settings; show storefront progress; create, deliver, display, and validate rewards; enforce issuance limits; manage subscriptions; respond to support, privacy, legal, and security requests; and produce aggregate or de-identified service analytics. We do not sell personal information or use it for third-party advertising or legally significant automated decisions.

Sharing and service providers

We disclose information only to Shopify; infrastructure, database, hosting, monitoring, and email providers that process it for us; the merchant whose store collected the information; or authorities when disclosure is legally required. Providers may process information only to deliver their contracted services. We do not share shopper information with unrelated merchants.

Cookies and similar technologies

Invitova may use first-party storage or cookies to remember a storefront interaction, associate a reward with the correct shopper, limit duplicate rewards, and keep the service secure. We do not use these technologies for cross-store advertising tracking.

Retention and deletion

• Merchant configuration and operational records are generally kept while the app is installed and as needed to provide the service.
• Direct shopper identifiers and active reward records are kept only as long as needed to deliver rewards, prevent duplicate claims, support the merchant, and meet legal obligations.
• Short-lived security fingerprints and their counters are erased after two completed store days. De-identified quiz analytics may be kept for up to 13 months before deletion or aggregation.
• When Shopify sends a customers/redact request, we delete or irreversibly redact the affected customer’s personal information, including email, name, and phone number. When Shopify sends a shop/redact request after uninstall, we delete or irreversibly redact the store’s personal information, except where retention is legally required.

International processing and security

Information may be processed outside the country where the merchant or shopper is located. We use reasonable technical and organizational safeguards designed to protect information in transit and at rest and restrict access to people and providers that need it to operate the service. No internet service can guarantee absolute security.

Your choices and privacy rights

A shopper can contact the merchant whose store they used to request access, correction, deletion, or another right available under applicable law. Shopify sends supported data-access and deletion requests to Invitova, and we respond through the merchant. Merchants can contact us through the support channel on Invitova’s Shopify App Store listing.

Children

Invitova is a business service for Shopify merchants and is not directed to children. Merchants are responsible for operating their storefronts in accordance with applicable age and consent requirements.

Changes to this policy

We may update this policy when our data practices or legal obligations change. We will publish the revised version here and update the date above. Material changes will be communicated when required by law.

Contact

For privacy or support questions, contact the developer through the support channel shown on Invitova’s Shopify App Store listing.