SendMyEbook ("the App") is a Shopify application that lets merchants sell digital
products (ebooks, PDFs, audio, video, and similar files) and automatically delivers
them to customers after a successful purchase. This policy explains what data the
App collects, why, and how it is protected.
Information we collect
The App only collects what it needs to deliver digital files and enforce a merchant's download rules:
- Store information — your shop domain and an access token issued by Shopify when you install the App, used to call the Shopify Admin API on your behalf.
- Product and order data — the Shopify products/variants a merchant maps to digital files, and order details (order number, financial status, line items) needed to detect a successful purchase.
- Customer email address — taken from the order, used solely to send the digital-download email for that order.
- Digital files — the files a merchant uploads, stored so they can be delivered to that merchant's customers.
- Download activity — timestamps, IP address, and user agent recorded against each download link, used to enforce download limits and for the merchant's own analytics.
We do not collect payment card details — all payments are processed by Shopify.
How we use this information
- To detect a successful order and generate secure, time-limited download access for the customer who paid for it.
- To enforce the download limits, link expiration, and refund rules a merchant configures.
- To send the automatic delivery email, and to show merchants their own orders, downloads, and analytics inside the App.
- To operate billing for the App's own subscription plans via Shopify's billing API.
How this information is stored and protected
- Digital files are stored in a private, access-controlled object storage bucket. Files are never exposed at a public URL — every download uses a signed, time-limited link generated at request time.
- Shopify access tokens are encrypted at rest.
- All data is stored in a private database and is not accessible to other merchants using the App — every query is scoped to the merchant's own store.
- All traffic to and from the App is encrypted in transit (HTTPS).
Sharing of information
We do not sell merchant or customer data, and we do not share it with third parties
except the infrastructure providers required to run the App (hosting, database, and
object storage) and Shopify itself. These providers only process data on our behalf
and are not permitted to use it for their own purposes.
Data retention and deletion
- If a merchant uninstalls the App, their store is marked inactive and no further access tokens are used.
- We honor Shopify's mandatory compliance webhooks: a customer's data-erasure request redacts their email/name from order records, and a shop-redaction request deletes all of that shop's data, including uploaded files.
- Merchants can delete a digital product or file at any time from within the App, which also removes it from storage.
Your rights
Merchants and their customers can request access to, correction of, or deletion of
their data at any time by contacting us using the details below.
Contact
Questions about this policy or your data can be sent to
viraninayan518@gmail.com.