Legal
Privacy Policy
This Privacy Policy explains what information SutraApps processes when a merchant installs and uses our Shopify apps, why we process it, and the choices available to merchants and their customers.
Last updated: 4 September 2026
This policy is written to be clear for merchants. It is provided for information and is subject to final legal review.
1. Introduction
SutraApps builds apps for Shopify merchants, including Wraply — Gift Wrap & Message. This policy applies to our website and to the apps we publish. When a merchant installs one of our apps, the merchant is the controller of their store data and SutraApps acts as a processor on the merchant's behalf.
2. Information We Collect
We aim to collect only what an app needs to function. Depending on the app and how it is configured, this may include:
- Store and account information provided by Shopify at install time, such as store domain, store name, plan type and contact email
- App configuration and settings created by the merchant
- Order-related information required to deliver app functionality, such as whether gift wrapping was selected and any gift message text entered at checkout
- Technical and usage information such as log entries, error reports and app interaction events
- Information you provide directly, such as when you email us or submit our contact form
3. Shopify Data
Our apps access Shopify data through the permissions (scopes) a merchant approves during installation. We request the narrowest set of scopes needed for the app to work. Access can be revoked at any time by uninstalling the app from the Shopify admin.
4. Merchant Information
We process merchant information to install and configure the app, to provide support, to communicate about the service, and to maintain the security and reliability of our apps.
5. Customer Information Processed Through Shopify
Where an app feature requires it, we process limited end-customer information on the merchant's behalf. For Wraply this may include:
- Gift message content written by the customer
- Gift wrapping selections associated with an order or line item
- Order and line item identifiers needed to associate a gifting choice with the correct order
6. How We Use Information
We use information to:
- Provide, operate and maintain app functionality
- Respond to merchant support requests
- Diagnose errors, prevent abuse and improve reliability and performance
- Produce aggregated usage insights shown to the merchant in the app
- Comply with legal obligations and Shopify platform requirements
7. Data Retention
We retain data only as long as it is needed to provide the app or to meet legal obligations. When an app is uninstalled, we delete or anonymize associated store data in line with Shopify's app data requirements, unless a longer retention period is legally required.
8. Data Security
We use encryption in transit, access controls, environment separation and monitoring to protect the data we process. More detail is available on our Security page. No system can be guaranteed to be completely secure, but we work to reduce risk and respond quickly to issues.
9. Data Sharing
We do not sell personal data and we do not share it for advertising purposes. We share data only with the merchant whose store it belongs to, with service providers that help us operate our apps, and where we are legally required to do so.
10. Service Providers and Sub-processors
We use third-party infrastructure and service providers, such as hosting and database providers, to run our apps. These providers process data only on our instructions and are bound by confidentiality and data protection obligations. A current list of sub-processors is available on request at sutraapps.team@gmail.com.
11. International Data Processing
Data processed by our apps may be stored or handled in a country other than the one where the merchant or their customers are located. Where this happens, we take steps to ensure appropriate safeguards are in place for the transfer.
12. Customer Privacy Rights
Depending on where they are located, individuals may have rights to access, correct, delete, restrict or object to the processing of their personal data, or to request a copy of it. Because we act as a processor for the merchant, requests from end customers should be directed to the merchant's store. Merchants can contact us for help fulfilling these requests.
13. Shopify Privacy and Compliance Requests
We support Shopify's mandatory app privacy webhooks for customer data requests, customer data erasure and shop data erasure. When these requests are received, we action them for the data our apps hold.
14. Cookies and Similar Technologies
Our website uses only what is needed to serve the site and keep it working. Our apps may use cookies or local storage in a storefront where necessary to deliver app functionality, such as remembering a gifting selection during a session.
15. Changes to This Privacy Policy
We may update this policy as our apps or legal obligations change. When we do, we will update the date at the top of this page. Material changes will be communicated to merchants where appropriate.
16. Contact
For any privacy question or request, email sutraapps.team@gmail.com and we will respond as soon as we can.
Questions about this document? Email sutraapps.team@gmail.com.