Privacy Policy

Last updated: 1 March 2026

Thank you for visiting our website & using our apps!

In order to provide the most quality services through our apps & website we need to understand how your store works. Only then we can deliver the best possible outcome for your business. That said, your privacy and the security of your & your customers’ personal data is, and will always be, very important to us.

EGNITION Pty Ltd (“EGNITION”, “we”, “us”, “our”) provides software development services, e-commerce & marketing consulting services and develops software to help merchants sell better or more efficiently online through various platforms, such as Shopify. EGNITION has adopted this Privacy Policy Agreement to guide you through the collection, use, retention, and disclosure of Personally Identifiable Information (“Personal Data”, as further described below) that you may provide while using our apps and services in connection with these platforms (collectively referred to as “Services”). All EGNITION websites & apps are located on egnition.io and its subdomains. We encourage you to read this Privacy Policy Agreement in order to understand how we collect and process Personal Data in the course of providing the Services and your interaction with the Services.

By using the Services, you consent to the collection, use, retention, and disclosure of your Personal Data for processing as described in, and subject to the limitations set out in, this Privacy Policy Agreement.

We never sell personal data and we carry out all processing operations in strict compliance with applicable data protection legislation, including but not limited to:

The Australian Privacy Act 1988 and the Australian Privacy Principles (APPs)
The General Data Protection Regulation (EU) 2016/679 (“GDPR”), specifically but not limited to Article 6(1)(b) to (f) and Article 28
The UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018
The California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”), where applicable

This Privacy Policy should be read in conjunction with our Terms of Service and Data Processing Agreement, which are available on our website.

Privacy Policy Agreement Summary

Types of Data Collected

Our website, software or apps may collect three types of Personal Data:

The data that we might collect about a website visitor.
The data that we might collect about our software/apps user (merchant).
The data that we might collect about merchant’s customers through APIs if you use our software/apps.

Merchant’s Data

Merchant’s store data. We collect merchant’s email, name, store name, store domain, store country on app install.
App usage data. We collect pages visited, buttons clicked, device type, browser type and version, operating system, screen resolution, language, country.
Cookies. We use cookies to store app data. Information we store in cookies does not contain any personally identifiable information or your store related data.
Communication. All emails we send are directly related to our apps and the services we provide to you. We may send you essential communications that you cannot unsubscribe from, including notifications about important app changes, required updates, security alerts, billing matters, and service interruptions. These communications are necessary for the proper functioning and security of our apps. We may also send optional communications such as review requests, feature announcements, and usage tips. You can unsubscribe from optional communications at any time using the link provided in each email. We do not advertise third-party products or services, and we do not sell or share your contact information for marketing purposes.

Merchant’s Store Customers Data

Some of our apps may access or process your customers’ data through the Shopify API solely to provide the app’s functionality — for example, syncing order data between stores or sending back-in-stock notification emails to customers who have opted in. In these cases:

We only access the minimum data necessary for the specific feature to function.
Customer data is processed on your behalf (you are the data controller, we are the data processor).
We do not use your customers’ data for our own marketing, analytics, or any purpose unrelated to providing the app’s functionality to you.
We do not sell, share, or disclose your customers’ personal data to third parties, except as required to deliver the service (e.g. sending an email via a transactional email provider on your behalf).
Customer data is handled in accordance with our Data Processing Agreement and Shopify’s data protection requirements.

The specific types of customer data accessed vary by app and are limited to what each app needs to operate. You can review the data access permissions requested by each app during installation. In addition, our apps comply with Shopify’s protected customer data requirements and request only the minimum required API access scopes, in accordance with Shopify’s data protection policies.

Personal Data

Personal Data is any information that would identify a person directly, or indirectly in combination with data from other sources. For example, a full name, home or work address, phone number, national identification number (SSN, SIN, etc.), email address, banking details, IP address, biometric data, usage data, or any information that may individually identify a person.

EGNITION may collect Personal Data including without limitation your name, phone number, email address, IP address, and device identifiers and/or geolocation information, in the course of its Services, and may use or disclose that Personal Data as described within this Privacy Policy Agreement.

EGNITION may collect and use aggregated, anonymous information to provide data about the Services to advertisers, potential business partners, and other unaffiliated entities. As this information does not identify a person and is therefore not Personal Data, EGNITION’s use of such aggregated, anonymised and/or de-identified data is not subject to this Privacy Policy Agreement.

Consent & Collection of Personal Data

If you use an EGNITION website or software developed by EGNITION your consent is implied to collect and use your Personal Data to facilitate that use which can be initiated by you only. Examples of instances in which Personal Data may be collected by EGNITION are, but are not limited to:

When you install an EGNITION App,
When you access and navigate an EGNITION website, or engage in communication and/or business transactions with EGNITION services,
If you knowingly submit Personal Data through an EGNITION website for the purpose of registering for a service, a contest, or authentication.

During these instances, we may collect data such as, but not restricted to: areas of the services or EGNITION website you visit, content you view, your IP address, data downloaded or submitted by you, the individuals or entities with whom you communicate.

In the event EGNITION requests Personal Data for scenarios independent of the above, such as marketing-related questions via questionnaires, surveys, and profile data, it will include a specific consent request. The consent request will include a clear purpose and goal for the collection of Personal Data, along with a means of withdrawing consent. In these scenarios, we may ask for data such as, but not limited to: your contact information (name, telephone numbers, email address, mailing address), date of birth, product and/or cosmetic concerns, which brands and products you use, user authentication and security information (e.g. username and password).

If at any point you wish to withdraw consent to Personal Data collection, please contact EGNITION via the Contact Us area at the bottom of this Privacy Policy Agreement. Please note that certain Services may only be able to be offered or provided to you if you disclose the Personal Data necessary to facilitate those Services, and therefore EGNITION may not be able to provide you with certain Services in the event that you choose not to disclose that Personal Data.

Age of Consent

The Services offered by EGNITION are directed towards and designed for the use of persons above the age of majority in your province, state, or country. Persons under the age of majority are not permitted to use the Services on their own, and EGNITION will not approve applications of, or establish, or maintain accounts or memberships for, any persons below their respective region’s age of majority.

EGNITION does not solicit or knowingly collect Personal Data from persons below the age of majority of their region. If we discover we have received Personal Data of a person below the age of majority, we will delete such information from our systems. Additionally, if a parent or legal guardian believes that Personal Data regarding a minor in their care has been provided to EGNITION, they may request the minor’s information be corrected or deleted by contacting EGNITION via the Contact Us area at the bottom of this Privacy Policy Agreement.

Anonymous Data

When you interact with an EGNITION Service, similar to most other websites, apps, and online services, certain anonymous technical information about your visit is automatically logged and collected by EGNITION. This may include information about the type of browser you use, operating system, the date and time you access the Service, the links you accessed while using the Service, and the internet address of the website, if any, which linked directly to the EGNITION Service. This information is used for system administration purposes such as diagnosing problems with EGNITION’s Services, servers, and websites, compiling aggregated and statistical information, and to improve the operation and content of EGNITION’s websites and Services. It is not personally identifiable and is not considered Personal Data and subject to this Privacy Policy Agreement.

Personal Data Usage

EGNITION may use collected Personal Data for such purposes as:

Helping to establish and verify the identity of users, and to keep user accounts secure,
Opening, maintaining, administering and servicing users’ accounts or memberships,
Providing Services and support to users,
Improving EGNITION’s websites, including tailoring its websites to users’ preferences,
Providing users with product or Service updates, promotional notices, and offers, and other information about EGNITION and its affiliates,
Corresponding with you, and responding to your questions, inquiries, comments, and instructions,
Maintaining the security and integrity of EGNITION systems, and
Complying with applicable laws.

Once collected, EGNITION will store and process your Personal Data in secure locations. Personal Data will only be retained by EGNITION for the length of time required to fulfill the purpose or complete the service for which it was collected, or as may be required by law. Beyond that point, Personal Data in the possession or control of EGNITION will be anonymised or securely destroyed.

Legal Basis for Processing

Data protection law in the European Union and the United Kingdom requires a “lawful basis” for collecting and retaining Personal Data from citizens or residents of the European Economic Area and the UK. EGNITION collects and processes your Personal Data for a variety of purposes outlined in this Privacy Policy Agreement. In certain cases, separate consent to this processing is not required, including:

For the performance of a contract: To perform our contractual obligations to you, including app installation, contacting you in relation to the provision of the Services, where EGNITION needs to provide your Personal Data to our service providers to provide the Services, or to aggregate and centralise data for the performance of the Services.
To meet legal obligations: To comply with laws, regulations, court orders, or other legal obligations or to assist in an investigation.
For legitimate interests: To operate EGNITION’s business and provide the Services, other than in performing our contractual obligations to you, except where overridden by the interests or fundamental rights and freedoms that require protection of Personal Data. For example, the following areas include processing permitted due to legitimate interests:
- Essential Service Communications. To communicate with you regarding the Services, including notifications about important app changes, required updates, security alerts, billing matters, service interruptions, and changes to EGNITION’s Terms of Service or Privacy Policy. These essential communications are necessary for the proper functioning and security of the apps you use, and are sent regardless of your email preferences. They do not require separate consent as they form part of our contractual obligation to you.
- Respond to Your Requests. To respond to your requests for technical support, online services, product information or to any other communication you initiate. This includes accessing your account to address technical support requests.
- Optional Communications. EGNITION may send you optional communications related to our apps and Services, such as review requests, feature tips, and usage recommendations. All such communications are directly related to the apps you have installed and the services we provide — we do not advertise third-party products or services. You may opt out of these communications at any time using the unsubscribe link provided in each email.
- Compliance with Law and Public Safety. To assist in the investigation of suspected illegal or wrongful activity, including sharing information with other entities for fraud, loss, and crime prevention purposes. To protect and defend EGNITION’s rights and property, or the rights or safety of third parties.
- Improvement and Development. To develop, provide, enhance, and improve EGNITION Services and your experience, including to enable you to use the full range of our Services. For internal purposes related to certain research, analytics, innovation, testing, monitoring, customer communication, risk management, and administrative purposes.
- Enforcing Terms and Notice. To enforce EGNITION’s Terms of Use or this Privacy Policy Agreement, or agreements with third parties.
- Merger or Acquisition. To support a contemplated reorganisation or an actual reorganisation of EGNITION’s business, in connection with a financing, a sale, or other transaction involving the disposal of all or part of our business or assets, including for the purpose of permitting the due diligence required to decide whether to proceed with a transaction. Note that certain country/region-specific disclosures may also apply, depending upon the jurisdiction in which you reside.

Consent as a Basis for Processing

In some cases, EGNITION will ask for your consent to process your Personal Data. You may indicate your consent in a number of ways, including, as may be presented by EGNITION and permitted by law, ticking a box (or equivalent action) to indicate your consent when providing us with your Personal Data through our Services or a form, or registering or installing our software. Note that certain country/region-specific rules regarding consent may also apply, depending upon the jurisdiction in which you reside.

Shopify Platform Compliance

Our apps are distributed through the Shopify App Store and are subject to Shopify’s mandatory privacy and compliance requirements. In accordance with Shopify’s privacy law compliance policies, our apps implement and respond to all mandatory compliance webhooks:

Customer data requests — enabling store owners to retrieve stored customer data upon request
Customer data erasure — deleting customer data when requested by a store owner on behalf of their customer
Shop data erasure — erasing all store data upon app uninstallation

Our apps are reviewed and approved by the Shopify App Review team, which verifies compliance with Shopify’s data privacy and security requirements.

Data Security

EGNITION maintains reasonable physical, technical, and administrative security measures to minimise the risk of unauthorised loss, theft, copying, misuse, access, disclosure, alteration, or destruction of your Personal Data.

If transactions are offered as part of an EGNITION Service, transaction information is transmitted to and from EGNITION in encrypted form using industry-standard secure connections to help protect such information, including Personal Data transmitted in the course of these transactions, from interception.

EGNITION also restricts access to your Personal Information to only those persons who have a legitimate business need or legal requirement to view it in connection with the Services. You, as a Personal Data owner, may also authorise any persons you may choose to have access to your Personal Data.

Although EGNITION utilises security measures appropriate to the level of risk, no method of data transfer or storage on the internet is 100% secure and security risks cannot be eliminated entirely. As such, EGNITION cannot guarantee perfect security, integrity, or confidentiality of Personal Data.

EGNITION maintains a security incident response protocol to be put in place in the event that the security of your Personal Data in the possession or control of EGNITION is compromised. In the event of a data breach or security incident involving the Services, EGNITION will apply this protocol to enable EGNITION to effectively and efficiently respond to, and contain the breach or incident. EGNITION may also seek to notify you in such event. If notification is appropriate or required, EGNITION may notify you by email, messaging to your device, or other reasonable means.

Disclosure of Personal Data

EGNITION does not provide Personal Data to unaffiliated third parties for their use in marketing directly to you. We may use unaffiliated companies or trusted third party service providers to help maintain and operate our Services for reasons related to our business operations and to better serve you, and those companies may receive your Personal Data for that purpose. When EGNITION shares Personal Data with third-party services that support our delivery of the Services, we require that they use your Personal Data only for the purposes we’ve authorised and that they protect your Personal Data to at least the same standards used by EGNITION. We DO NOT disclose or collect Personal Data which potentially can be collected by us & is specific to merchant’s store and transactions in connection therewith.

EGNITION may disclose Personal Data about you in connection with legal requirements, such as in response to an authorised subpoena, governmental request or investigation, or as otherwise permitted by applicable law (including, without limitation, to prevent fraud or abuse, or to protect EGNITION’s legal rights, property, or the safety of EGNITION, its employees, users or others).

Finally, as EGNITION’s business develops, it may sell or buy corporate assets, and in such transactions, Personal Data may be one of the transferred business assets. If EGNITION, its internet businesses, or substantially all of its shares or assets, is acquired or an acquisition is contemplated, Personal Data may be one of the assets assessed or transferred in connection with that transaction.

Data Processors

The following is a list of Data Processors engaged by EGNITION who may receive Personal Data. We have signed Data Processing Agreements (or have agreed to Data Processing Addendums) with the following companies:

Company	Country	Purpose
Shopify Inc.	Canada / US	App platform and infrastructure
Amazon Web Services (AWS)	US	Cloud hosting and data storage
Google LLC	US	Analytics, advertising, and communication tools
Atlassian, Inc.	US	Project management and issue tracking
Help Scout	US	Customer support platform
Campaign Monitor	Australia	Email communications
Mailgun Technologies, Inc.	US	Transactional email delivery
Cloudways (DigitalOcean)	US	Cloud hosting and infrastructure
Meta Platforms, Inc.	US	Advertising
X Corp.	US	Advertising
Pinterest, Inc.	US	Advertising
Microsoft Corporation	US	Advertising
Quora, Inc.	US	Advertising
Twilio Inc. (Segment)	US	Customer data platform and analytics
Bugsnag (SmartBear)	US	Error monitoring and crash reporting

New processors will be added to this list 7 days prior to being integrated into our Services. If you are subject to the GDPR, UK GDPR, or the Australian Privacy Act and have objections to a Data Processor addition, please contact EGNITION via the Contact Us area at the bottom of this Privacy Policy. Objections to Data Processors may impact the Services which can be offered or provided to you by EGNITION.

If you believe your Personal Data has been disclosed other than as described in this Privacy Policy Agreement, please contact EGNITION via the Contact Us area at the bottom of this Privacy Policy Agreement.

Transfer of Your Personal Data to Other Countries

The Personal Data EGNITION processes, and associated Services and systems, may be housed on servers in various locations where EGNITION maintains servers or facilities, including the United States, Canada, Australia, and the EU. Please be aware that Personal Data we collect may be processed and stored in one or more of these locations. The data protection and privacy laws in these locations may offer a different level of protection than in your country/region, however, as noted earlier in this Privacy Policy Agreement, EGNITION takes steps, including through contracts, intended to ensure that the Personal Data it collects continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law.

Where Personal Data is transferred from the European Economic Area or the United Kingdom to a country that has not received an adequacy decision by the European Commission or UK authorities, EGNITION relies on appropriate safeguards, such as the European Commission-approved Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, and the EU-U.S. Data Privacy Framework, to transfer the Personal Data. By using our Services and submitting your Personal Data, you agree to the transfer, storage, and/or processing of your Personal Data in the locations contemplated above. Where and as required, we will seek your explicit consent as outlined in this Privacy Policy Agreement.

Cookies

The EGNITION website, or the third party companies used to host, operate, or maintain these websites, may place a “cookie” on your computer in order to allow you to use these websites and to personalise your experience.

A “cookie” is a small piece of data or an alphanumeric identifier, that can be sent by a web server to your computer or device, which then may be stored by your browser on your computer or device. Cookies allow EGNITION to recognise your computer or device while you are on our websites and help customise your online experience and make it more convenient for you. Cookies are also useful in allowing more efficient log-in for users, tracking activity histories, and preserving information between browsing sessions. The information collected from cookies may also be used to improve website functionality.

When you first visit our website, a cookie consent banner is presented allowing you to accept or reject non-essential cookies. You can change your cookie preferences at any time via the cookie settings link on our website. For a detailed breakdown of the specific cookies we use, their purposes, and their durations, please refer to our Cookie Policy, which is accessible through the cookie consent banner on our website.

Most web browsers also have features that can notify you when you receive a cookie or prevent cookies from being sent. You can manage your cookie preferences through your browser settings. If you disable cookies, however, you may not be able to use certain functions of EGNITION websites or apps.

Your Rights

EGNITION is committed to ensuring you retain full access to and control of your Personal Data. Depending on the laws applicable to you, you may have the following rights in relation to your Personal Data:

Right to access: You may request a copy of the Personal Data we hold about you.
Right to rectification: You may request that we correct inaccurate or incomplete Personal Data.
Right to erasure: You may request that we delete your Personal Data, subject to certain legal exceptions.
Right to data portability: You may request that we transfer your Personal Data to another service provider in a commonly used, machine-readable format.
Right to object: You may object to certain processing of your Personal Data, including processing for direct marketing purposes.
Right to restrict processing: You may request that we limit the processing of your Personal Data in certain circumstances.
Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact EGNITION via the Contact Us area at the bottom of this Privacy Policy Agreement. Subject to certain exceptions and limitations that may be prescribed by applicable law, you will be provided with reasonable access to your Personal Data, and will be entitled to have it amended or corrected as appropriate.

If you are a citizen or resident of the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. If you are a resident of Australia, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Links to Third Parties

EGNITION Services may contain links to other websites, apps, or services, including those of advertisers or third party content providers who offer downloads as part of an EGNITION Service. EGNITION is not responsible for the privacy practices or the content of other websites, apps, or services. We encourage you to read the privacy policies published by such third parties before divulging your Personal Data to them.

Privacy Policy Agreement Changes & Updates

EGNITION reserves the right to modify or supplement this Privacy Policy Agreement in its discretion, at any time. If a material change to the terms of this Privacy Policy Agreement is made, we will post a notice on our website and update this page accordingly. The collection, use, and disclosure of your Personal Data by EGNITION will be governed by the version of this Privacy Policy Agreement in effect at that time. Your continued use of EGNITION’s websites and/or Services subsequent to any changes to this Privacy Policy Agreement will indicate your consent to the collection, use, and disclosure of your Personal Data in accordance with the amended Privacy Policy Agreement.

Contact Us

If you have any questions or comments regarding this Privacy Policy Agreement or any aspects of EGNITION Services, please contact us at support@egnition.io.

Egnition Pty Ltd
PO BOX 21, Caringbah, NSW, Australia, 1495