Smart Related Products & Blogs by Tiwaa

Privacy Policy

Last updated: September 9, 2026

This Privacy Policy explains how Tiwaa ("we", "us", "our") collects, uses and protects data when you install and use Smart Related Products & Blogs (the "App") on your Shopify store.

1. Data we collect

We collect only the minimum data needed to operate the App:

• Shop domain — to identify your store and namespace your settings.
• Shopify access token — stored in our database and used to read your products and blog posts and to write recommendation metafields to your store.
• Product and article references — the ids, titles, handles and image URLs of the products and blog posts you choose to relate to each other.
• Widget settings — the layout, colors and display options you configure in the App.
• Subscription status — whether your Shopify Billing subscription is active.

We do not collect, store or process any customer personal information (names, emails, addresses, orders or browsing data) from your store or your shoppers.

2. How we use the data

• Authenticate and authorize your use of the App inside Shopify admin.
• Write your related products and blog posts to metafields so your theme can display them.
• Process billing through the Shopify Billing API.
• Respond to support requests and GDPR / CCPA data subject requests.

3. Storefront behaviour

Recommendations are rendered by Shopify (Liquid) from metafields on your store. The App does not load any scripts, cookies, pixels or trackers on your storefront and does not receive any request from your shoppers.

4. Data sharing

We do not sell, rent or trade your data. Data is processed only by:

• Shopify — as required to operate an embedded Shopify app (authentication, billing, webhooks, metafields).
• Cloudflare — our infrastructure provider. Data is processed on Cloudflare Workers and stored in Cloudflare D1. Cloudflare is a GDPR-compliant data processor.

5. Data retention

• Shop settings, relations and session data are retained while the App is installed.
• When the App is uninstalled (app/uninstalled webhook) all shop data is deleted immediately.
• On a shop/redact request from Shopify any remaining shop data is permanently deleted.
• customers/data_request and customers/redact requests are acknowledged immediately; because we store no customer data there is nothing to export or erase.

6. Your rights

You may request access to, correction of or deletion of your shop's data at any time by emailing tiwaaofficial@gmail.com. We respond within 30 days. If you are located in the European Economic Area you have additional rights under the GDPR, including the right to lodge a complaint with a supervisory authority.

7. Security

All data is transmitted over TLS. Access tokens are stored in an access-controlled database and are never exposed to the browser. Webhooks are verified with HMAC signatures before processing.

8. Changes to this policy

We will update this page and revise the "Last updated" date for any material change. Continued use of the App after a change constitutes acceptance of the updated policy.

9. Contact

Questions? Email tiwaaofficial@gmail.com.