This Privacy Policy describes how Rewardify ("we", "us", or "our"), operated by Indinuity Inc., an Ontario, Canada corporation, collects, uses, and safeguards personal information in connection with our website at rewardify.ca ("the Site") and the Rewardify Shopify application ("the App"). The App provides store credit, rebate, and pricing discount management services ("the Service") to merchants worldwide who use Shopify to power their online stores.

We are headquartered in Ontario, Canada and are committed to protecting personal information in compliance with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), the European Union's General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA) where applicable.

Information We Collect

From merchants (Shopify store owners) who install the App:

  • Shopify account details: store domain, owner name, email address, business address, currency, and timezone
  • Access tokens required to connect and operate the App within your Shopify store
  • Plan and billing information

From your customers (end consumers of your Shopify store):

  • Customer name and email address, as provided by Shopify
  • Order history, used to calculate store credit, rebates, and rewards

From visitors to our Site (rewardify.ca):

  • Technical information such as IP address, browser type, and pages visited, collected via server log files
  • Any information you voluntarily provide when contacting us

Cookies

We use only essential cookies — small data files required for the App and Site to function correctly. These cookies maintain your login session and remember your in-session preferences. They are not used for advertising, tracking, or analytics purposes.

We do not use advertising cookies, tracking pixels, web beacons, or third-party analytics cookies. We do not participate in any advertising networks or retargeting programs.

Because we use only strictly necessary cookies, no consent is required to set them. You may configure your browser to block or delete cookies; however, doing so may prevent parts of the App or Site from functioning correctly.

How We Use Your Information

We use personal information exclusively to:

  • Provide, operate, and maintain the Service
  • Authenticate and authorize your access to the App
  • Respond to support requests and inquiries
  • Send transactional communications such as account notices and service updates
  • Comply with our legal obligations

We do not use personal information for advertising profiling or behavioural marketing.

We maintain appropriate technical and organizational safeguards to protect personal information against unauthorized access, loss, alteration, or disclosure.

Sharing Your Information

We do not sell, rent, or trade personal information. In over ten years of operation, we have never sold customer or merchant data to any third party.

We may share personal information only in the following limited circumstances:

  • With Shopify, as required to operate within the Shopify platform ecosystem
  • With service providers who assist us in delivering the Service (such as hosting and transactional email providers), who are contractually bound to use the data only as directed by us and to keep it confidential
  • When required by law, such as in response to a valid court order, subpoena, or government request
  • To protect our rights, in cases of fraud, security incidents, or to enforce our agreements

International Data Transfers

Your information is stored and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection for commercial organizations subject to PIPEDA. Transfers of personal data from the European Economic Area to Canada are therefore permitted without additional safeguards. If you are located outside Canada, your use of the Service constitutes your acknowledgment that your information will be transferred to and processed in Canada.

Third-Party Websites

Our Site or App may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

Your Rights

Depending on where you are located, you may have the following rights regarding your personal information. To exercise any of these rights, please contact us at support@rewardify.ca.

All users (Canada — PIPEDA and Quebec Law 25):

  • Right to access the personal information we hold about you
  • Right to correct inaccurate or incomplete personal information
  • Right to withdraw consent to our collection, use, or disclosure of your personal information (subject to legal or contractual limitations)
  • Right to request deletion of your personal information
  • Right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca

European Economic Area and UK residents (GDPR / UK GDPR):

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing in certain circumstances
  • Right to data portability
  • Right to object to processing based on legitimate interests
  • Right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK at ico.org.uk)
  • Where we process your data on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal

Our lawful basis for processing your personal data is the performance of a contract (providing the Service you have requested). We do not rely on consent as the basis for processing operational data.

California residents (CCPA/CPRA):

  • Right to know what personal information we collect, use, and disclose
  • Right to delete your personal information
  • Right to opt out of the sale or sharing of personal information — we do not sell or share personal information
  • Right to non-discrimination for exercising your privacy rights

Data Retention

We retain personal information only as long as necessary to provide the Service or as required by law. When a merchant uninstalls the App or requests deletion of their data, we will delete or anonymize that information within a reasonable period, except where retention is required to meet a legal or regulatory obligation.

Data Security and Breach Notification

We implement appropriate technical and organizational measures to protect personal information. In the event of a breach of security safeguards involving personal information that poses a real risk of significant harm, we will notify affected individuals and the relevant supervisory authorities as required by applicable law (including PIPEDA and the GDPR).

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the effective date at the bottom of this page. For material changes, we will provide more prominent notice. Continued use of the Service after a revised policy is posted constitutes your acceptance of the changes.

For any questions, concerns, or to exercise your privacy rights, please contact us:

Privacy Officer
Indinuity Inc. (Rewardify)
74 Devon Road
Brampton, ON  L6T 5H3
Canada
support@rewardify.ca

This policy was last updated May 8, 2026.