Privacy policy

MRP Discount (Shopify app) · Last updated 5 October 2026

This policy explains how MRP Discount ("the App", "we", "us"), provided by Durakart Marketing Private Limited, collects, uses and shares information when a Shopify merchant installs and uses the App.

1. Information the App accesses

When a merchant installs the App, Shopify gives it access to these kinds of shop data, only to make the App work:

• Discount codes: the App creates and reads the discount codes it made (Shopify scope write_discounts).
• Product data: the App reads product IDs, titles, images, prices and compare-at prices to show them while you create a discount and to show the price maths. The App does not change your products (Shopify scope write_products, granted at install; the App only reads with it).
• Customer segments: the App reads the names and IDs of the customer segments you made in Shopify (for example "VIP" or "Repeat buyers"), so you can limit a code to one of them (Shopify scope read_customers). It only uses this list inside the discount form. It does not read, copy or store individual customers' names, emails, phone numbers or addresses.
• Shop identifier: a Shopify-issued shop domain and access token are stored in the App's database so the App can call Shopify on behalf of the shop.

The App does not store customer personal data such as names, email addresses, phone numbers, shipping addresses or payment information.

2. How the App uses information

Information the App accesses is used only to:

• Create and manage discount codes and automatic sales for the merchant.
• Show products, collections and the price maths inside the App.
• Show your customer segments so a code can be limited to a group of customers.
• Sign the merchant in to the App through their Shopify session.

We do not sell, rent, trade or otherwise pass merchant or shop data to any third party.

3. Data storage and retention

Session data (shop domain, access token) is stored in a PostgreSQL database hosted on Railway. It is kept only while the App is installed on the shop.

When a merchant uninstalls the App, Shopify sends a shop/redact webhook 48 hours later. The App then deletes all of that shop's session records.

4. Customer data requests (GDPR / CCPA)

The App supports Shopify's required privacy webhooks:

• customers/data_request: answered. The App stores no customer data, so there is nothing to return.
• customers/redact: answered. The App stores no customer data, so there is nothing to delete.
• shop/redact: the App deletes the shop's session records.

5. Security

All traffic between the App and Shopify uses HTTPS. Access tokens are stored encrypted at rest by the hosting provider's managed database. Only the App's production process can reach the database.

6. Third-party services

• Shopify: sign-in, discounts and product data.
• Railway: hosting for the App and its database.

Each has its own privacy policy for how it handles data on our behalf. This website (mrpdiscount.jugaad.sh) also uses Google Analytics to count visits; see the website privacy policy.

7. Changes to this policy

We may update this policy from time to time. Changes show in the "Last updated" date at the top.

8. Contact

Questions about this policy or how the App handles data: atish@jugaad.sh.

Durakart Marketing Private Limited · 32 Lake Temple Road, Kolkata 700029, India