Privacy Policy

This Privacy Policy explains how CRO Sections, operated by Ecommerce Storez, collects, uses, stores, and shares information when a merchant installs or uses the CRO Sections Shopify application.

By installing or using CRO Sections, you acknowledge the practices described in this policy.

1. Information we collect

When a merchant installs or uses CRO Sections, we may receive or process the following information:

• Shopify store information, including the store domain, store identifier, store name, and app installation status.
• Authentication and session information required to securely connect the app to the merchant's Shopify store.
• Information about themes and theme files when required to install, update, or manage a section selected by the merchant.
• Product information required to configure product-related sections, including product identifiers, titles, images, prices, variants, and availability.
• Section activation, installation, configuration, and subscription information.
• Cross-sell configurations created by the merchant, including selected products and related product recommendations.
• Technical information such as browser type, IP address, request timestamps, error logs, and basic diagnostic information.
• Communications sent to our support email address.

2. Customer information

CRO Sections is not designed to collect customer names, customer email addresses, shipping addresses, payment information, or order details.

Some storefront sections may use product and storefront information to display content to visitors. The Recently Viewed Products section may store product-view history locally in the visitor's browser. This locally stored history is used to display recently viewed products and is not intended to be transmitted to CRO Sections servers.

3. How we use information

We use information to:

• Authenticate merchants and provide access to the app.
• Install, manage, update, and remove selected theme sections.
• Display products and product-related information inside supported sections.
• Save section subscriptions, installations, and merchant-created cross-sell configurations.
• Process and synchronize Shopify app billing status.
• Provide technical support and respond to merchant questions.
• Diagnose errors, prevent abuse, protect the service, and improve reliability.
• Comply with applicable legal and regulatory obligations.

4. Shopify billing

Paid section subscriptions are processed through Shopify's billing system. CRO Sections does not directly receive or store a merchant's complete payment-card information.

Shopify may provide CRO Sections with subscription identifiers, billing status, approval status, applicable charges, and related information required to provide paid app functionality.

5. How information is shared

We do not sell merchant or customer personal information.

Information may be shared only when reasonably necessary with:

• Shopify, to authenticate the app, access authorized store resources, manage billing, and provide app functionality.
• Hosting, infrastructure, security, monitoring, and technical service providers supporting the operation of CRO Sections.
• Professional advisers, regulators, courts, or government authorities when disclosure is legally required.
• A purchaser or successor in connection with a merger, acquisition, restructuring, or sale of the business, subject to appropriate confidentiality and privacy protections.

6. Data retention

We retain information only for as long as reasonably necessary to provide CRO Sections, maintain legitimate business records, resolve disputes, enforce agreements, meet security requirements, and comply with legal obligations.

After the app is uninstalled, store-related information may be retained for a limited period where required for billing, compliance, security, backup, or legal purposes. Information will then be deleted or anonymized unless a longer retention period is legally required.

7. Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, loss, or misuse.

No internet transmission or storage system can be guaranteed to be completely secure. Merchants are responsible for protecting access to their Shopify accounts and authorized devices.

8. International processing

Information may be processed in countries other than the country in which the merchant or store is located. These countries may have different data-protection laws.

Where required, we take reasonable measures intended to provide appropriate protection for transferred personal information.

9. Privacy rights and requests

Depending on applicable law, a merchant may have rights to request access to, correction of, deletion of, restriction of, or a copy of personal information associated with the merchant or store.

Merchants may submit a request using the contact information below. We may need to verify the request before responding.

Requests involving Shopify customer or store data may also be received through Shopify's mandatory privacy request process and handled in accordance with applicable Shopify requirements and privacy laws.

10. Cookies and local storage

CRO Sections may use cookies, session storage, or similar technologies that are necessary for authentication, security, app operation, and user preferences.

Storefront sections may use browser local storage for functional features such as recently viewed product history. Merchants should ensure that their own store privacy and cookie disclosures describe storefront technologies as required by applicable law.

11. Children's privacy

CRO Sections is a business application intended for Shopify merchants and is not directed to children. We do not knowingly collect personal information directly from children through the app.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to CRO Sections, legal requirements, or our information practices.

The updated policy will be published on this page with a revised effective date.

13. Contact us

Questions, privacy requests, and data-deletion requests can be sent to: