Privacy Policy

1. Who we are

SeasonAura is a Shopify app that adds seasonal visual effects, promotions, and related engagement tools to merchant storefronts. The operator of the app and this website is OClock Software. Contact: support@oclocksoftware.info.

2. Scope

This policy covers (a) the SeasonAura Shopify app installed on a merchant’s store, and (b) the public marketing website at https://seasonaura.oclocksoftware.info. It does not replace Shopify’s own privacy practices for the Shopify platform.

3. Information we collect

From merchants (via Shopify)

• Shop domain and basic shop identifiers needed to install and run the app
• OAuth session tokens and credentials required for authenticated Admin API access (stored securely for session management)
• App configuration and decoration settings (for example effect preferences, schedules, visibility rules, promo text) stored as store settings associated with the shop
• Billing plan name and subscription status managed through Shopify Billing
• Optional uploaded media (for example custom cursor images or audio) when a merchant uses upload features, subject to Shopify file APIs and plan entitlements

From storefront visitors

SeasonAura renders visual and audio effects on the merchant’s storefront based on the merchant’s configuration. The public effects configuration may be fetched for the shop so decorations can render. We do not sell personal data. We do not use storefront effects to build advertising profiles. Merchants remain responsible for their own storefront privacy notices and any third-party tools they install.

From this marketing website

We may collect standard server logs (IP address, user agent, pages requested) needed to operate and secure the site. If you email support, we process the content of your message and contact details you provide. See also our Cookie Policy.

4. How we use information

• Provide, operate, and improve the SeasonAura app and website
• Authenticate merchants and sync decoration settings to the storefront
• Operate the free plan and, if paid plans are introduced later, process billing via Shopify
• Respond to support requests
• Comply with legal obligations, including Shopify GDPR webhooks
• Protect against abuse, fraud, and security incidents

5. Legal bases (EEA / UK where applicable)

Where GDPR applies, we rely on performance of a contract (providing the app to the merchant), legitimate interests (securing and improving the service), and legal obligations (responding to data subject requests via Shopify’s privacy webhooks).

6. Sharing

We use Shopify’s platform (including Admin APIs, Billing, app proxies, and theme app extensions) to deliver the service. We may use hosting and infrastructure providers to run the app and website. We do not sell personal information. We may disclose information if required by law or to protect rights and safety.

7. Data retention

Shop sessions and store settings are retained while the app remains installed and as needed to operate the service. When a shop uninstalls the app or Shopify sends a shop redact webhook, we delete or anonymize associated shop data in accordance with Shopify’s privacy compliance requirements, subject to limited retention for legal or security needs.

8. GDPR & Shopify privacy webhooks

SeasonAura implements Shopify’s mandatory privacy compliance webhooks:

• customers/data_request — respond to customer data access requests for data we hold (if any)
• customers/redact — delete customer personal data we hold (if any) when requested
• shop/redact — delete shop data after uninstall, when Shopify instructs us to do so

Customer personal data is primarily controlled by the merchant and Shopify. SeasonAura is designed around shop-level decoration settings rather than customer profiles.

9. Security

We use industry-standard measures appropriate to the nature of the data, including encrypted transport (HTTPS) and access controls on our systems. No method of transmission or storage is 100% secure.

10. International transfers

Data may be processed in countries where we or our processors operate. Where required, we use appropriate safeguards for cross-border transfers.

11. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data, or to object to certain processing. Merchants and customers should typically start with Shopify and the merchant’s own privacy channels. You may also contact us at support@oclocksoftware.info.

12. Children

The service is directed to businesses and is not intended for children under 16.

13. Changes

We may update this policy from time to time. The “Last updated” date above will change when we do. Continued use of the service after updates constitutes acceptance of the revised policy where permitted by law.

14. Contact

Privacy questions: support@oclocksoftware.info

This document is a draft for App Store readiness and should be reviewed by qualified counsel before submission.