Privacy policy
Vikalp Omni ("Vikalp", "we") makes apps for Shopify stores: Wishlist, Reviews, Referrals, push notifications and a mobile app builder. This policy explains what data our apps handle, why, and the choices merchants and shoppers have. Questions: support@vikalpomni.com.
Who this covers
Merchants who install our apps, and shoppers who use the features those merchants switch on. For shoppers' data, the merchant decides what is collected and why, and we process it on the merchant's behalf.
What we collect
- Store details from Shopify: store name, domain, email, currency and country, and the app plan.
- Wishlists: the products a shopper saves, linked to their Shopify customer account, and whether they asked for price-drop or back-in-stock emails.
- Reviews: what the shopper writes, their rating, the name they choose to show, and the order it relates to.
- Referrals: referral links, which orders came from them, and rewards earned.
- Omni Pass (loyalty): the shopper's membership, token and credit balances and their history, tier, birthday (if they add it), social platforms they say they follow, rewards redeemed, and the name, email and mobile number they enter when joining. Omni Credits are held as Shopify store credit.
- Store activity: with the merchant's permission, Shopify's customer events (products viewed, added to cart, checkout started) linked to a random browser ID, so abandoned cart and checkout reminders reach the right shopper.
- WhatsApp: when a merchant connects their WhatsApp Business Account, shoppers' WhatsApp numbers and names, whether and where they agreed to messages (or sent STOP), and the messages exchanged with the store, with their delivery status; taps on links in those messages, and which orders followed them (so the store sees what its messages achieved).
- Notifications: web-push subscriptions and app device tokens, so notifications reach the right browser or phone.
- Email: shoppers' names and email addresses from Shopify, used only to send the emails they or the merchant's settings ask for, and a record of what was sent.
- Support: messages merchants send us from their dashboard.
We do not collect payment card details. Payments for apps are handled by Shopify.
How we use it
Only to run the features a merchant switches on, to support merchants, to keep our service secure, and to meet legal obligations. We do not sell data, use it for advertising, or share one store's data with another store.
Merchants' own ad and analytics accounts
A merchant can connect their own Meta (Facebook and Instagram) and Google (Analytics and Ads) accounts in Vikalp. Vikalp then sends those accounts the events the merchant chose, such as joining a loyalty programme, saving to a wishlist or writing a review, on the merchant's behalf. On the website this happens only with the shopper's consent from the store's cookie banner. Meta receives the shopper's email address, phone number and name only as one-way hashes. The merchant is responsible for their own use of these accounts.
Emails and your choices
Shoppers get wishlist alerts only if they opt in, marketing reminders only if they agreed to marketing in Shopify, and Omni Pass emails only as members. Every email has a one-click unsubscribe link. Shoppers can also ask the store to delete their data, which Shopify passes on to us.
Who helps us run the service
- Render (hosting and database)
- Amazon Web Services (sending email)
- Google Firebase (app push notifications)
- Meta (WhatsApp messages, through each merchant's own WhatsApp Business Account)
- Shopify (store data, store credit, sign-in and billing)
They process data only on our instructions and under their own security commitments. Data may be processed outside your country, with safeguards required by law.
How long we keep it
As long as the merchant uses our apps. When a shopper asks to be forgotten, we erase or anonymise their data. When a merchant uninstalls, Shopify tells us 48 hours later to delete the store's data, and we do.
Security
Data is encrypted in transit, access tokens are encrypted at rest, each store's data is kept separate, and our team's access is limited, logged and protected with two-step sign-in.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, or to object to how it is used. Shoppers should contact the store they bought from; merchants and anyone else can write to support@vikalpomni.com. We reply within 30 days.
Changes
If we change this policy, we'll update the date above and, for important changes, tell merchants in their dashboard.