Privacy
Last updated 5 September 2026
ConversionKit is a Shopify app that builds product bundles and measures whether they made a difference. It is designed so that it never needs your customers’ personal information, and it does not collect any.
What we store
- Your store’s domain and the access token Shopify issues when you install the app, so the app can act on your behalf.
- Your bundle configuration: which products are in a bundle, their quantities, the discount, and the schedule. This includes product identifiers, handles and titles from your catalogue.
- Your app settings: the share of visitors held back for measurement, and an email address if you choose to receive alerts.
- Daily counters: for each bundle, the number of visitor sessions, the number of orders, and total order value, split by whether the visitor was shown the bundle or held back.
What we do not store
No customer names, email addresses, phone numbers or postal addresses. No order numbers, no line items, no individual customer records of any kind. The counters above are totals only and cannot be traced back to a person.
The app does not request Shopify’s protected customer data scopes. Because of that, Shopify removes personal fields from the analytics events the app receives before they ever reach us.
Permissions the app asks for
- Products (read) — to let you pick products for a bundle and to check whether they are still buyable.
- Discounts (read and write) — to create the automatic discount that prices your bundles.
- Cart transforms (write) — to present a bundle as a single cart line, where you switch that on.
- Pixels and customer events — to count how often bundles were shown and whether a purchase followed. This is what makes an honest measurement possible. It covers device and activity data such as browser and page views, not personal details.
Cookies on your storefront
The app sets one cookie, _ck_arm, in your shoppers’ browsers. It holds a single letter recording whether that visitor is being shown your bundles or held back for comparison. It lasts 30 days, contains no identifier, and is never sent anywhere except back to this app as part of an anonymous count.
How long we keep it
For as long as the app is installed. When you uninstall, Shopify notifies us and your store’s data — settings, bundles and counters — is deleted. We keep nothing afterwards.
We answer Shopify’s mandatory privacy requests. Because we hold no customer data, a request for a specific customer’s information returns nothing, and a request to erase a customer has nothing to erase.
Who else sees it
The app runs on Vercel and stores its data in a Supabase Postgres database. Both act as processors on our behalf. We do not sell your data, share it for advertising, or pass it to anyone else.
Contact
ConversionKit is built by WitsCode. For any question about this policy or to ask what we hold about your store, write to support@conversionkit.app.