Privacy Policy

Introduction

SwipeReel ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application and related services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

Information Provided by Shopify

When you install SwipeReel on your Shopify store, we receive the following information from Shopify:

• Store name and domain
• Store owner's name and email address
• Store locale and timezone
• Product information (titles, descriptions, images, prices)
• Theme information for widget integration

Information You Provide

We collect information you directly provide to us, including:

• Videos you upload to the platform
• Feed configurations and settings
• Product tagging information
• Support requests and communications

Automatically Collected Information

When visitors interact with SwipeReel widgets on your store, we automatically collect:

• Video view counts and duration
• Click-through data on product tags
• Widget interaction metrics
• Device type and browser information
• IP addresses (anonymized)

Instagram Integration (optional)

If you choose to connect an Instagram Business or Creator account to import your videos, SwipeReel uses the official Instagram Graph API (Instagram Login) with the instagram_business_basic permission only. With your explicit consent we receive:

• Your Instagram user ID and username
• Your Instagram profile picture URL
• A long-lived access token (encrypted at rest)
• Metadata and media URLs for your own Reels and videos (caption, timestamp, thumbnail, signed media URL)

We do not request comment-management, messaging, or insights permissions. We never receive your Instagram password — login happens on instagram.com. The access token is used solely to fetch your own media on your behalf so you can rehost it inside your Shopify store, and is automatically refreshed within the 60-day long-lived-token window. Disconnecting Instagram from inside SwipeReel immediately deletes the token and profile data from our servers; to also remove SwipeReel from your Instagram account, visit Instagram → Apps and Websites. (Instagram does not allow apps to programmatically revoke access on a user's behalf.)

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Personalize and improve your experience

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following situations:

• Service Providers: We may share information with third-party vendors who perform services on our behalf (e.g., hosting, analytics).
• Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities.
• Business Transfers: We may share information in connection with a merger, acquisition, or sale of assets.
• With Your Consent: We may share information with your consent or at your direction.

Data Storage and Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

Your data is stored on secure servers and we use encryption for data transmission. However, no method of transmission over the Internet or electronic storage is 100% secure.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce agreements.

When you uninstall SwipeReel from your Shopify store, we delete your data within 30 days, except where retention is required by law.

If you've connected an Instagram account, removing SwipeReel from Instagram → Apps and Websites triggers Meta's Data Deletion callback to our endpoint at /api/meta/data-deletion, which clears your Instagram profile data, access token, and any cached media references from our servers within seconds. You can also disconnect from inside SwipeReel itself, which removes the same data from our side immediately.

Your Rights

Depending on your location, you may have the following rights regarding your data:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to processing of your personal information

To exercise any of these rights, please contact us at [email protected].

Cookies and Tracking

SwipeReel uses minimal cookies necessary for the operation of our service. We do not use cookies for advertising purposes.

Our widgets may use local storage to remember user preferences (such as mute state) to improve the user experience.

Within the SwipeReel admin app (the merchant-facing dashboard accessed inside Shopify admin), we use Microsoft Clarity to understand how merchants interact with our interface. Clarity sets first-party and third-party cookies to enable session analytics. See the "Session Analytics (Microsoft Clarity)" section below for details.

Session Analytics (Microsoft Clarity)

We use Microsoft Clarity, a behavioral analytics service provided by Microsoft Corporation, to capture how merchants use the SwipeReel admin dashboard. Clarity records session interactions (clicks, scrolls, navigation paths) and aggregates them into heatmaps and session replays so we can identify usability issues and improve the product.

Where it runs: Clarity is loaded only inside the SwipeReel admin app (paths under /app when accessed from Shopify admin) and during the app's installation and authentication flow (paths under /auth), so that we can identify drop-offs during install. It is not loaded on our public marketing pages, on your storefront, or on the SwipeReel widgets shown to your customers.

What is captured: Page interactions, mouse movement, click and scroll events, browser and device metadata, and approximate location derived from IP address. Clarity applies strict input masking by default — text typed into form fields, numeric values, and other potentially sensitive content are masked before leaving the browser.

What is not captured: Passwords, payment information, and other masked fields. We do not use Clarity to record storefront shoppers or end-customers.

Microsoft processes this data in accordance with the Microsoft Privacy Statement. If you would like us to exclude your sessions from Clarity, contact us at [email protected] and we will disable tracking for your shop on request.

Third-Party Services

Our service integrates with the following third-party services:

• Shopify: For store integration and billing
• Google Cloud Platform: For application hosting, video storage, and delivery
• Microsoft Clarity: For session analytics and heatmaps within the merchant admin dashboard. See the "Session Analytics (Microsoft Clarity)" section above and Microsoft's Privacy Statement.

Each of these services has their own privacy policy governing the use of your information.

Children's Privacy

SwipeReel is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: [email protected]
• Website: Contact Form