Privacy Policy

Last updated: May 25, 2026.

Who operates Unlock Options

Unlock Options is a Shopify app operated by Rebel Growth Operators (the "App"). For questions about this policy or your data, contact support@unlockoptions.app.

What data we collect

When you install the App, Shopify provides us with:

• Your shop's domain (e.g., your-store.myshopify.com)
• An Admin API access token scoped to read and write your products
• Shop owner identity (name, email) as part of the OAuth handshake

When you use the App, we read the following data from your shop via Shopify's Admin API:

• Product titles, handles, and option configurations (including which options are linked to metafields)
• Product option IDs and option value IDs (used to identify which option you want to unlock)

We do not read, store, or process:

• Customer data (names, emails, addresses, orders, carts)
• Payment or financial data
• Product images, descriptions, or pricing
• Inventory levels or variant SKUs

Where we store data

Shop access tokens and basic shop identification are stored in a PostgreSQL database hosted by Neon (Inc.) in the United States, encrypted at rest. Application logs are processed by Vercel (Inc.).

Marketing site analytics

The public marketing site at unlockoptions.app uses Google Analytics 4 to measure visitor traffic, page views, and referral sources. Google Analytics sets first-party cookies and may collect data such as your IP address, browser, device, and pages viewed. We use this data only to understand which marketing channels reach merchants and to improve the site. Google's privacy practices are documented at policies.google.com/privacy.

Google Analytics is not loaded inside the embedded Shopify app — only on the public marketing pages. You can opt out of Google Analytics tracking by installing Google's browser opt-out extension or by enabling Do Not Track in your browser.

For each unlock operation, we store an audit log entry containing: your shop domain, the product ID and title, the option ID and name, the metafield namespace and key that was unlinked, and a timestamp. This log is used for support troubleshooting and to enable a future "unlock history" feature.

How long we keep data

When you uninstall the App, Shopify automatically notifies us via the app/uninstalled webhook. We immediately delete your shop access token and tier configuration. 48 hours later, Shopify sends a shop/redact webhook, after which we also delete your unlock audit log entries.

GDPR and data requests

We honor Shopify's mandatory GDPR webhooks. Because we do not store customer-level data, the customers/data_request and customers/redact webhooks are no-ops for our app. If you need a copy of your shop's data or its deletion, contact us at support@unlockoptions.app and we'll respond within 30 days.

Changes to this policy

If we make material changes to this policy, we'll notify installed merchants via the email associated with their Shopify account at least 14 days before the change takes effect.