Privacy Policy

Liftelia ("Liftelia", "we", "us") provides promotion profit analytics for e-commerce brands, including a Shopify app and a free promo audit service. This policy explains what data we collect, why, how we protect it and how you can have it deleted.

1. Who we are

Liftelia, operated from Almaty, Kazakhstan. Contact: privacy@liftelia.com.

2. Data we collect

Store data (merchants). To measure promotions we use order-level commercial data: order dates, product and variant identifiers, product titles, quantities, prices, discounts and discount codes, refunds, and unit costs where you provide them. For the Shopify app we also store your shop domain and an access token issued by Shopify.

Data we do not need and do not intend to collect. Customer names, email addresses, phone numbers, postal addresses and payment details. Our import removes these fields before storage. If a file you send contains them, we delete them on receipt.

Contact data. If you submit our audit form or email us, we receive your name, work email, store URL, revenue range and any message you write.

Website data. This site is a static site. We do not use advertising cookies. Our hosting provider may keep standard server logs (IP address, browser type, time of request) for security and reliability.

3. How we use data

• To calculate the profit effect of your promotions and produce reports and recommendations for you.
• To operate, secure and improve the service.
• To respond to your requests and send service-related messages.

We do not sell your data. We do not share one merchant's data with another merchant. We do not use your data to train models for other customers or to build benchmarks that identify you. If we ever offer aggregated, anonymized benchmarks, it will be opt-in.

4. Legal bases

Where GDPR or similar law applies, we process store data to perform our contract with you and based on our legitimate interest in running a secure service, and we process contact data based on your request or consent.

5. Storage and security

• Data is encrypted in transit (HTTPS/TLS) and at rest.
• Each store's data is logically isolated; access is restricted to what is needed to provide the service.
• Access tokens and secrets are stored encrypted and never in source code.
• Files received for audits are kept in encrypted storage, used only for your report, and deleted within 30 days after delivery unless you ask us to keep them.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you without undue delay.

6. Retention and deletion

When you uninstall the Shopify app, we stop accessing your store and delete your store data within 48 hours of the shop-redact request from Shopify, or earlier on your request. You can ask us at any time to delete your data by emailing privacy@liftelia.com. We respond to Shopify's mandatory customer data request and redaction webhooks.

7. Service providers

We use a small number of providers to run the service, such as hosting and database providers and email. They process data only on our instructions and under appropriate confidentiality and security terms. A current list is available on request.

8. International transfers

We operate from Kazakhstan, and our providers may process data in other countries, including the United States and the European Economic Area. Where required, we rely on appropriate safeguards for such transfers.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, to object to or restrict processing, and to lodge a complaint with your local data protection authority. Email privacy@liftelia.com and we will respond within 30 days.

10. Children

Liftelia is a business service and is not directed to children.

11. Changes

We may update this policy. Material changes will be posted here with a new date, and sent by email to merchants with an active account.

12. Contact

Questions about privacy: privacy@liftelia.com. General questions: hello@liftelia.com.