Privacy Policy

SweepLaunch (“we”, “us”, “our”) provides a sweepstakes and giveaway platform for Shopify merchants. This Privacy Policy explains what information we collect, how we use it, the legal bases for processing, and the rights you and your customers have. It applies to our website, our Shopify app, and all related services (collectively, the “Service”).

By installing or using SweepLaunch, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

When you connect your Shopify store, we receive and store data needed to operate giveaways on your behalf:

• Your store domain (e.g. your-store.myshopify.com), store name, and contact email.
• An OAuth access token scoped to the permissions you approve (e.g. read orders, read customers) used to read order data and register webhooks.
• Order events delivered via Shopify’s orders/create webhook, used to convert qualifying purchases into giveaway entries.
• App subscription and billing status returned by Shopify’s Billing API.

We access Shopify data only to provide the Service. We do not sell merchant data, and we do not use your store data to build advertising profiles.

To run sweepstakes, we process limited personal information about your customers and giveaway participants, which may include:

• Name and email address.
• Purchase amount and order identifier (to calculate entries earned).
• IP address and basic device signals used for fraud detection.
• Referral relationships between participants (who referred whom).

We act as a data processor on behalf of the merchant (the data controller). Customers should direct data requests to the merchant whose giveaway they entered; merchants can fulfill these requests using the tools and endpoints described below.

Entries are records created when a customer participates in a sweepstakes — through a purchase, an Alternative Method of Entry (AMOE / no-purchase entry), a referral, or a bonus action. Each entry stores the participant’s email, the entry source, the number of entries earned, an associated purchase amount (if any), a fraud score, and a timestamp.

Entry data is used to operate the giveaway: tallying entries, building leaderboards, detecting fraud, drawing winners, and generating compliance records (such as AMOE confirmations and official rules). Winner selection uses a weighted random draw and excludes entries flagged as fraudulent.

Paid plans are billed exclusively through Shopify Billing. Charges appear on your regular Shopify invoice. We do not collect, store, or process your credit card or bank details — payment credentials are handled entirely by Shopify.

We store your selected plan, subscription status, and the Shopify subscription identifier so we can grant the correct features and reconcile your subscription state with Shopify.

We use a single, essential session cookie (session_token) to keep merchants securely signed in. It is strictly necessary for the Service to function and is not used for advertising or cross-site tracking.

Authentication for merchants is provided via Google sign-in. We receive your name, email address, and profile picture from Google to create and identify your account. We do not receive your Google password.

We collect aggregated, operational analytics about giveaway performance (entries, tracked revenue, conversion, and health metrics) to power dashboards and the “Giveaway Success Score.” These metrics are derived from your own store and entry data and are shown back to you inside the app.

If you connect an optional third-party integration (such as an email marketing provider), data you choose to share is governed by that provider’s privacy policy in addition to this one.

We support compliance with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

Your rights may include the right to access, correct, port, restrict, or delete your personal data, and the right to object to or withdraw consent for certain processing. California residents have the right to know what personal information is collected and to request deletion. We do not “sell” or “share” personal information as those terms are defined under the CCPA.

Lawful bases for processing include performing our contract with merchants, complying with legal obligations, and our legitimate interests in operating, securing, and improving the Service.

As a Shopify app, we implement Shopify’s mandatory compliance webhooks — customers/data_request, customers/redact, and shop/redact — so that data access and erasure requests routed through Shopify are honored automatically.

You can request deletion of personal data in any of the following ways:

• Customers: contact the merchant whose giveaway you entered, or submit a request through your Shopify order. Verified requests trigger Shopify’s customers/redact webhook, and we delete that customer’s entry records.
• Merchants: uninstalling the SweepLaunch app revokes our access and disables your account. 48 hours after uninstall, Shopify sends the shop/redact webhook, upon which we permanently delete your store’s giveaways, entries, referral records, and related data.
• Anyone: email us at blake@sweeplaunch.com and we will process your request within 30 days.

We retain merchant and entry data for as long as your account is active and a giveaway is running, plus a reasonable period afterward to meet legal, compliance, and dispute-resolution obligations. When a deletion request or shop/redact event is received, we remove the associated data from our active systems. We may retain limited records where required by law.

Questions, concerns, or privacy requests? We’re here to help.

We may update this Privacy Policy from time to time. Material changes will be reflected by the “Last updated” date above.