What personal data we collect when you visit our website, use our plugins, install our Shopify apps or contact us, and how we use and protect it.
Last updated: October 18, 2026
The Short Version
We collect only what we need to provide and support our products.
We never sell your personal data.
Shopify handles app payments. We never see your card details.
Email us at any time to see, export or delete your data.
1. Who We Are
Gplagfy is a product brand of Golden Info Systems Ltd., Dhaka, Bangladesh. We are responsible (the "data controller") for the personal data described in this policy. For our Shopify apps, we process store data on behalf of the merchant who installs them.
2. Information We Collect
Contact details: your name, email address and company when you contact us, open a support ticket or hire us for custom work, plus billing details for that work.
Support data: your messages, attachments and any site details you share in a ticket.
Shopify app data: your shop domain, store name, the store owner's name and email, your plan, and the content you add in the app. Payments are handled by Shopify.
Website usage: your IP address, browser, the pages you visit and the site you came from, collected through server logs and cookies.
Our WordPress plugins are downloaded and updated through WordPress.org, so the WordPress.org privacy policy covers those downloads.
3. How We Use Your Information
To provide our products and the custom work you ask for.
To answer support requests and messages.
To send service emails, such as ticket replies and important notices.
To send product news, only if you opt in. Every email has an unsubscribe link.
To improve our website and products, and to prevent fraud and abuse.
To meet our legal and tax obligations.
4. Legal Bases for Processing
If you are in the European Economic Area or the UK, we rely on these legal bases:
Contract: to provide the products, support and work you asked for.
Legitimate interests: to keep our Services secure, prevent fraud and improve our products.
Consent: for marketing emails and non-essential cookies. You can withdraw it at any time.
Legal obligation: to keep tax and accounting records.
5. Shopify App Data
Our Shopify apps ask only for the store permissions their features need. We do not access your customers' personal data unless a feature needs it and you approve that permission.
We respond to Shopify's privacy requests, including customer data requests and deletion requests. When you uninstall an app, Shopify sends us a request to delete your store's data 48 hours later. We delete that data within 30 days of the request.
6. Cookies
Our website uses:
Essential cookies for logging in and security. The site cannot work without them.
Analytics cookies to understand how visitors use the site, only where the law allows or you agree.
You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site from working.
7. Who We Share It With
We do not sell your personal data, and we do not share it for advertising. We share it only with:
service providers that help us run Gplagfy, such as hosting, email and support tools. They may use it only to provide their service to us;
Shopify, for our Shopify apps;
authorities, when the law requires it;
a buyer or successor, if our business is ever sold or merged. In that case this policy continues to apply to your data.
8. International Transfers
We are based in Bangladesh, and some of our service providers are in other countries. When your data is transferred abroad, we use safeguards required by law, such as standard contractual clauses.
9. How Long We Keep It
Invoices for custom work: for as long as tax and accounting laws require.
Support tickets: up to 3 years after a ticket is closed.
Server logs: up to 90 days.
Shopify store data: deleted within 30 days of a deletion request.
10. How We Protect It
We use HTTPS encryption, access controls and limited staff access to protect your data. No system is completely secure, but if a breach affects your data, we will tell you and the authorities as the law requires.
11. Your Rights
Depending on where you live, you can ask us to:
show you the personal data we hold about you;
correct or update it;
delete it;
send you a copy in a portable format;
stop or limit certain processing, or withdraw your consent.
California residents also have the right to know about and delete their data. We do not sell or share personal information as defined by the CCPA.
To make a request, email support@gplagfy.com. We reply within 30 days. You can also complain to your local data protection authority.
12. Children's Privacy
Our Services are not meant for children under 16, and we do not knowingly collect their data. If you think a child has given us personal data, contact us and we will delete it.
13. Changes to This Policy
We may update this policy from time to time. We change the "Last updated" date at the top of this page and, for important changes, we let you know by email or with a notice on our website.
Engraving, swatches, dates, checkboxes and add-on prices on any product. Choices are saved on the cart line, so your catalogue keeps only the SKUs you built.
