← Back to Plooka

Privacy Policy — Plooka

Last updated: 8 June 2026

1. Who we are

Plooka (“we”, “us”) is a Shopify app that helps merchants run pet-product subscriptions. This app is operated by:

• Company: Solid Frame Studio
• KvK number: 42074469
• Address: available on request via support@plooka.online
• Contact: support@plooka.online

2. Whose data this covers

• Merchants who install Plooka.
• Customers (subscribers) of those merchants, whose data we process on behalf of the merchant (the merchant is the data controller; we are a processor).

3. What we collect and why

• Shop & account data (shop domain, access tokens) — to operate the app.
• Subscription data (contract IDs, status, billing attempt results) — to manage subscriptions, predictions, and dunning.
• Pet profiles (name, species, breed, weight, birthdate, diet notes, vet-diet flag) — stored as Shopify customer metafields (source of truth) and mirrored in our database to power portion/reorder predictions.
• Customer identifiers (Shopify customer ID, email for transactional emails).

We do not sell personal data and do not use it for advertising. We do not log personal data.

4. How data is processed

• We use Shopify's native subscription and billing systems; we never handle card data — Shopify processes all payments.
• Predictions are computed from pet weight + product feeding rate.

5. Sub-processors

• Shopify (platform, billing, hosting of metafields).
• Our hosting provider (application hosting + database).
• Resend (transactional email delivery), if enabled.

6. Data retention & deletion

We honor Shopify's mandatory privacy webhooks:

• customers/redact — we erase a customer's pet profiles and subscription records.
• shop/redact — we erase all data for a shop (~48h after uninstall).
• customers/data_request — we compile the data we hold for a customer.

Merchants/customers can request export or deletion via support@plooka.online.

7. Your rights (GDPR/EU)

You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. Contact support@plooka.online. You may also lodge a complaint with your data protection authority (NL: Autoriteit Persoonsgegevens).

8. Security

• All webhooks are HMAC-verified; customer-portal requests are signature-verified.
• Least-privilege OAuth scopes; secrets stored as environment variables.

9. Changes

We may update this policy; the “Last updated” date reflects the latest version.

10. Contact

Solid Frame Studio — support@plooka.online — Address on request