Privacy Policy

Last updated: February 23, 2026

BlogBuddy ("we", "our", "us") is a Shopify application that helps merchants manage blog articles in bulk. This Privacy Policy describes how we collect, use, and protect your information when you use our application.

1. Information We Collect

When you install and use BlogBuddy, we may access or collect the following types of information:

• Blog Article Data: Titles, body content, summaries, tags, authors, publish status, and featured images — accessed via Shopify's Admin API to provide the app's core editing functionality.
• Store Information: Your store name and domain, used for authentication and session management.
• Session Data: Shopify OAuth tokens, stored securely to maintain your authenticated session.
• Theme Data: A read-only list of available article templates from your active theme.

2. Information We Do NOT Collect

• Customer personal information (names, emails, addresses)
• Payment, billing, or financial data
• Browsing behavior or tracking data
• Cookies or third-party analytics on your storefront

3. How We Use Your Information

All information accessed by BlogBuddy is used solely to provide the app's functionality:

• Displaying, editing, and creating blog articles within the app interface
• Authenticating your session with Shopify
• Importing and exporting article data as CSV files

We do not sell, rent, share, or transfer your data to any third parties for any purpose.

4. Data Storage & Security

Session data (OAuth tokens) is stored securely in a PostgreSQL database hosted on industry-standard cloud infrastructure with encryption at rest and in transit. Article data is read from and written directly to your Shopify store via Shopify's official Admin API — we do not store copies of your article content on our servers.

5. Data Retention & Deletion

• Upon app uninstallation, all session data associated with your store is automatically and permanently deleted from our database.
• We respond to all GDPR, CCPA, and other applicable data subject requests within 30 days of receipt.
• If you receive a customer data request, we will comply with the mandatory Shopify compliance webhooks (customers/data_request, customers/redact, shop/redact).

6. Data Sharing

We do not share your data with any third parties. Your data is only transmitted between your browser, our application server, and Shopify's API — all over encrypted HTTPS connections.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability

To exercise any of these rights, please contact us at the email below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: taruunn.info@gmail.com