Effective date: April 3, 2026 · Last updated: April 3, 2026
Mailcommerce AI is an email-marketing platform for Shopify merchants. We collect only the minimum data necessary to provide our services: store data through Shopify's APIs, storefront behaviour through our theme extension and web pixel, and subscriber information through popup forms — all to help merchants send targeted email campaigns and measure their results. We store data in the EU, honour every deletion request, and never sell personal data. We comply with the Shopify API License and Terms of Use.
Mailcommerce Limited (trading as "Mailcommerce AI"), a company registered in England and Wales.
In this policy, "we", "us", and "our" refer to Mailcommerce Limited. "You" refers to the merchant who installs our Shopify app, and "customer" or "buyer" refers to a visitor or shopper on the merchant's online store.
We comply with the Shopify Partner Program Agreement and the Shopify API License and Terms of Use.
We follow the principle of data minimisation: we only collect and retain the minimum personal data necessary to provide, operate, and improve Mailcommerce AI's email-marketing services. We do not collect data speculatively or retain it longer than required for its stated purpose. Each Shopify API scope we request corresponds to a specific feature, as detailed below.
When a merchant installs our app and grants the requested access scopes, we read the following from the merchant's Shopify store:
| Data category | Examples | Shopify scope |
|---|---|---|
| Customer records | Email address, first name, tags | read_customers, write_customers |
| Product catalogue | Title, price, images, inventory levels, variants | read_products, read_inventory |
| Orders | Order ID, line items, total, currency, customer email | read_orders, read_all_orders |
| Checkouts | Checkout token, email, line items, total price | read_checkouts |
| Discounts | Price rules, discount codes | read_discounts, write_discounts |
| Theme settings (read-only) | Whether our App Embed block is enabled | read_themes |
| Files | Merchant-uploaded images (for email design) | read_files |
We also receive Shopify webhook events for orders/create, checkouts/create, refunds/create, and app/uninstalled.
Our Theme App Extension and Web Pixel Extension run on the merchant's online store. They collect the following:
| Data point | Collection method | Purpose |
|---|---|---|
| Email address | Popup signup form submission; email link click parameter (_mcid); checkout email (via Web Pixel) | Subscriber identification, email campaign attribution |
| First name, last name | Popup signup form (optional fields) | Email personalisation |
| Product views | Theme App Extension detects product pages | Behavioural segmentation, campaign targeting |
| Cart activity | Theme App Extension intercepts /cart/add, /cart/change | Abandoned-cart triggers |
| Checkout start & completion | Web Pixel Extension (checkout_started, checkout_completed) | Revenue attribution to email campaigns |
| Quiz / survey answers | Popup signup form (optional custom fields) | Segmentation based on zero-party data |
Our storefront extension sets the following cookie on the customer's browser:
| Cookie | Domain | Duration | Purpose |
|---|---|---|---|
_mc_attr | Merchant's store domain (first-party) | 30 days | Stores an attribution identifier linking the customer to the email campaign they clicked. Used to attribute subsequent orders to the correct campaign. |
We also use the browser's sessionStorage (key: mc_sid) for a session identifier that groups page views within a single visit. This is not persisted across sessions and is not used for cross-site tracking or shared with third parties for their own purposes.
We respect the customer's browser Do-Not-Track signal and Shopify's customer privacy consent API. If a customer has not granted marketing consent, our tracking scripts do not set cookies or send behavioural events.
We use the collected data solely to provide, operate, and improve Mailcommerce AI's email-marketing services for the merchant:
mc_subscriber) so merchants can use Shopify's native segmentation tools.We do not:
Mailcommerce AI uses Google Gemini to help merchants generate email content. We want to be explicit about what data is and is not involved:
We share data with the following categories of processors, solely to deliver our services:
| Provider | Purpose | Data shared | Region |
|---|---|---|---|
| Google Cloud Platform (Firebase, Cloud Run) | Application hosting, database, task scheduling | All application data | EU (europe-west1) |
| SparkPost / MessageBird | Email delivery (ESP) | Recipient email, campaign content | EU/US |
| Google Gemini | AI content generation | Product catalogue data only (titles, descriptions, prices, images). No customer personal data. | US |
| Cloudflare | CDN, edge workers | HTTP requests (transient) | Global |
Each provider is bound by a Data Processing Agreement (DPA) or equivalent contractual terms. We do not permit any provider to use merchant or customer data for their own purposes.
Sub-processor updates: We will update this list when we add or replace a sub-processor. If you would like to be notified of sub-processor changes, email [email protected] to subscribe to updates.
Our primary data storage is in the EU (Google Cloud europe-west1, Belgium). However, some sub-processors operate in or transfer data to the United States or other countries outside the EEA:
Where an adequacy decision by the European Commission applies to the recipient country, we rely on that decision. In all other cases, we ensure that Standard Contractual Clauses (SCCs) approved by the European Commission are in place before any transfer occurs.
All application data is stored in Google Cloud Platform's europe-west1 (Belgium) region. This includes Firebase Firestore, Firebase Realtime Database, and Cloud Run services. We do not maintain separate backups or log archives outside of these systems.
| Data type | Retention period |
|---|---|
| Subscriber records | Until the merchant deletes them, or the merchant uninstalls the app (deleted within 30 days of shop/redact webhook) |
| Storefront behavioural events (product views, cart activity) | 90 days (automatic TTL deletion) |
| Order attribution records | Duration of the merchant's subscription |
| Campaign content and analytics | Duration of the merchant's subscription |
| Form analytics (aggregate) | Duration of the merchant's subscription |
| GDPR audit logs | 3 years (for legal compliance) |
Automatic (via Shopify): When a merchant uninstalls the app, Shopify sends a shop/redact webhook. We mark the account for deletion and, after a 24-hour grace period (to allow accidental-uninstall recovery), permanently delete all merchant and customer data across all collections within 30 days.
Manual request: Merchants may also request deletion of their data at any time by emailing [email protected]. We will process the request and confirm deletion within 30 days.
Inactive accounts: Merchant accounts remain active until the merchant uninstalls the app or requests deletion. We do not automatically delete inactive accounts.
We implement the following security measures:
401 Unauthorized response.X-Shopify-Webhook-Id header.In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will:
As a merchant using Mailcommerce AI, you can:
If you are a customer (buyer) on a store that uses Mailcommerce AI:
customers/redact webhook. We delete all personal data associated with your email address within 30 days of receiving the request._mc_attr cookie through your browser settings. Our scripts respect Do-Not-Track signals and Shopify's customer privacy consent API.For merchants and customers in the European Economic Area (EEA), United Kingdom, or Switzerland:
| Processing activity | Lawful basis | Detail |
|---|---|---|
| Providing the email-marketing service (campaign delivery, subscriber management) | Contract (Art. 6(1)(b)) | Necessary to perform the service the merchant has contracted for. |
| Storefront tracking & attribution (product views, cart events, order attribution) | Consent (Art. 6(1)(a)) | Customer consent is obtained by the merchant via Shopify's customer privacy consent API. Our scripts only activate when consent is granted. |
| Direct email marketing to customers | Consent (Art. 6(1)(a)) | The merchant is responsible for obtaining appropriate marketing consent from their customers before sending campaigns. |
| Aggregated analytics and service improvement | Legitimate interest (Art. 6(1)(f)) | De-identified, aggregate data used to improve deliverability and service quality. No individual-level profiling. |
| GDPR compliance audit logs | Legal obligation (Art. 6(1)(c)) | Required to demonstrate compliance with data protection law. |
The merchant is the data controller for their customers' personal data. Mailcommerce Limited acts as a data processor on the merchant's behalf. We process customer data only on the merchant's instructions and for the purposes described in this policy.
All data is stored and processed within the EU (Google Cloud europe-west1, Belgium). International transfers are covered in Section 7.
Listed in Section 6. Where a sub-processor operates outside the EEA, we ensure that appropriate safeguards are in place: either an adequacy decision by the European Commission, Standard Contractual Clauses (SCCs) approved by the European Commission, or the EU-US Data Privacy Framework certification.
We subscribe to and respond to all three Shopify mandatory compliance webhooks: customers/data_request, customers/redact, and shop/redact.
For privacy inquiries, contact [email protected].
For California residents and residents of other US states with privacy legislation (Colorado, Virginia, Connecticut, etc.):
Mailcommerce AI provides tools for merchants to collect marketing consent from their customers:
Mailcommerce AI is a business-to-business service for Shopify merchants. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child, we will delete it promptly.
We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify active merchants via email. We encourage merchants to review this policy periodically. Continued use of Mailcommerce AI after changes are posted constitutes acceptance of the updated policy.
If you have questions about this privacy policy or our data practices, contact us: