Who is responsible
Ino Loyalty is made by Tryino, İstanbul, Türkiye. The merchant that installs the app runs its own loyalty program and is the controller of its customers’ data. Tryino processes that data on the merchant’s behalf and on its instructions, as the processor, under our data processing agreement. We are the controller only for our own business contact with merchants, such as support e-mails. Shoppers should send privacy questions to the store first.
How the app runs
By default the app runs the loyalty program on Tryino’s own services, Ino Connect and the Shop Engine, hosted on Microsoft Azure in France Central (Paris, EU). This policy describes that standard setup. A store that has a separate Ino Loyalty Engine agreement with Tryino can be moved to its own engine; the section “If the store moves to its own Ino Loyalty Engine” explains what changes then.
What the app accesses in Shopify
- Orders and refunds: order number, amount, products and the Shopify customer ID, to award points and adjust them on cancellations and refunds. Any names, e-mail, phone or address in order data are discarded before anything is stored.
- Customers: the Shopify customer ID, the order count (for referral rewards) and the customer’s name. The name is shown live to store staff in the app’s admin pages and is never stored. The app writes the member’s points balance and tier to the customer record as app fields and tags, so the store can use them in its theme, e-mails and Shopify Flow.
- Products, collections and discounts: to calculate rewards, run games and apply member benefits in the cart.
The app does not access payment data and does not use phone numbers or addresses. Shoppers join with one click from their store account: there is no phone verification and the app sends no SMS.
What we store and for how long
| Data | Kept |
|---|---|
| Membership: Shopify customer ID, join date, tier, referral code | While the store uses the app, until the customer’s data is erased |
| Points history, basket reservations, tier history, badges, referrals | While the membership exists |
| Order summaries: amount, products, points | While the store uses the app. On erasure, unlinked from the person and cleared. |
| Game plays, product likes, daily check-ins | Deleted after the period the store sets: 30 to 1,095 days, 365 by default |
| Incoming order notifications (reduced) | Content emptied once processed, deleted after 30 days |
| Technical event log (Shopify IDs only) | 90 days |
| Data access reports | Emptied after 30 days, deleted after 60 days |
| Store staff IDs on point changes and settings | With the related record |
| Backups | 14 days, rolling |
| Server logs (no shopper data) | 90 days |
We do not store shopper names, e-mail addresses, phone numbers, addresses or payment details.
How we use it
Only to run the store’s loyalty program: earning and spending points, tiers, campaigns, referrals, missions and games, and showing the store its members and reports. The app sends no marketing messages itself; events such as “points expiring” or “tier changed” go to the store’s own Shopify Flow, where the store applies its customers’ marketing consent. We do not sell data, share it for advertising or use it across stores, and the app makes no automated decisions with legal or similar effects.
Shopify privacy requests and deletion
- customers/data_request: we prepare a report of the loyalty data we hold about the customer. The store can download it in the app.
- customers/redact: we delete the member and their loyalty data, usually within minutes.
- shop/redact: Shopify sends this 48 hours after the store uninstalls the app. We then delete all of that store’s data.
Deleted data disappears from backups within 14 days.
Shoppers’ rights
Shoppers can ask the store for access to, correction of or deletion of their data. Requests made through Shopify reach us automatically, as above. You can also write to privacy@tryino.com, and we will help the store answer within the legal deadline (30 days under KVKK).
Security
- All traffic uses HTTPS with HSTS. Data and backups are encrypted at rest, and Shopify access tokens are additionally encrypted (AES-GCM).
- The database is on a private network with no internet access. Secrets are kept in Azure Key Vault and read by managed identities.
- Access to secrets in Key Vault (audit events) and connections to the database are logged to Azure Log Analytics and kept for 90 days. Application logs contain no shopper data.
- Row-level security keeps each store’s data apart. Access to the app’s admin pages is checked with Shopify session tokens and limited to authorised staff. Staff point changes have daily limits.
- We have a security incident response policy. If an incident affects a store’s data, we inform the store without undue delay.
Where the data is
Data is hosted by Microsoft Azure in France Central (Paris, EU). Tryino is based in Türkiye, and our staff may access the systems remotely for support and operations. The safeguards for that access are set out in the data processing agreement.
If the store moves to its own Ino Loyalty Engine
A merchant that has a separate Ino Loyalty Engine agreement with Tryino can ask us to move its store to its own engine. This happens only under that agreement.
- The merchant’s own engine then runs the program. To create members in the merchant’s system, it reads the customer’s name, e-mail and phone from Shopify. That engine and its data are covered by the merchant’s Ino Loyalty agreement, not by this policy.
- The data moved from the app contains no names, e-mail addresses or phone numbers; the engine reads them from Shopify itself.
- The copy in the Shop Engine is kept for 30 days so that the merchant can receive its history file, and is then deleted. If Shopify sends shop/redact, it is deleted at once.
Contact
Privacy: privacy@tryino.com · Support: support@tryino.com
See also the terms of service, the data processing agreement and our general privacy policy for tryino.com.