Privacy policy
Make an offer by Abakira lets a store’s buyers propose a price on a product page. The merchant accepts, declines or counters the offer, and the buyer receives a link to pay the agreed price in Shopify’s checkout.
What we access, and why
- Products (read only) — to read the current price of the item an offer is made on. We never trust a price sent by the browser, and we never modify the catalogue.
- Draft orders — to create the draft order that carries the agreed price and its payment link, to check whether it was paid, and to delete it when the link expires or the merchant withdraws it.
What we store about buyers
When a buyer makes an offer, we store what they typed in the form: their email address, their name and a message if they chose to give them, the amount and quantity offered, the product, and the language of the store page. We use them only to show the offer to the merchant, to email the buyer the answer, and to send one payment reminder while the payment link is still valid. We do not store IP addresses, payment details, addresses or browsing history.
The buyer’s email, name and message are erased 180 days after the offer is closed (declined, expired, withdrawn or paid). The offer itself stays, without any personal data, in the merchant’s history.
What we store about merchants
We store the shop owner contact email and the shop name supplied by Shopify, the language of the merchant’s Shopify admin, the store currency, and the rules the merchant sets in the app. The contact email is used for essential service messages, such as the notice that an offer is waiting. It is not a marketing opt-in; we do not send marketing messages without separate, explicit consent.
We also record product usage events (for example “an offer was received” or “an offer was paid”, with amounts). These events carry no buyer personal data and are deleted after 400 days.
Who else sees this data
- Vercel runs the app and Neon stores its data.
- Resend (Resend, Inc., United States) delivers the emails: to the buyer, the answer to their offer and, if they have not paid yet, one reminder before the payment link expires; to the merchant, the notice that an offer is waiting. Resend receives the recipient’s email address and the message, nothing else.
- Crisp (Crisp IM SAS, Nantes, France) runs the support chat inside the merchant’s Shopify admin only. It never runs on a storefront, and buyers never encounter it.
- Shopify receives the buyer’s email on the draft order we create, as for any order in the merchant’s store.
What we never do
- We do not sell or share merchant or buyer data.
- We do not use buyer data for advertising, profiling or our own marketing.
- We do not track buyers across stores.
How it is protected
Data is encrypted in transit (HTTPS/TLS everywhere, including between the app and its database) and at rest by our database provider. Access is limited to what is needed to run the app.
Deletion
- When Shopify sends us a customer erasure request, we erase that buyer’s email, name and messages from every offer in that store.
- When a merchant uninstalls the app, we immediately clear the merchant contact email and admin language. Shopify sends us a shop redaction request 48 hours later, and we delete every record we hold for that shop, offers included.
- Merchants and buyers can ask us to delete their data at any time.
Our agreement with merchants
We act as a data processor on behalf of the merchant, who remains the controller of their store’s data, including the offers their buyers send. We process only the data listed above, only for the purposes listed above, only for as long as stated above, and we never use it for our own ends.
Contact
Make an offer is built by Abakira LLC. Our other Shopify apps are at abakira.com.