Privacy Policy

Who we are

Covr Suite is a set of apps that online stores use: discounts, checkout rules, product recommendations, a VIP program, and text messaging. It is operated by Pay Tech Payments LLC, 303 South Water Street, Ste 200, Henderson, NV 89015. Package protection is a separate product, Covr Protection, with its own privacy policy at covrprotection.com/privacy.

Merchants are the stores that use Covr Suite. Shoppers are their customers. We work for the merchant: a store decides which apps to switch on and how they behave, and we handle its shoppers’ information only to provide them.

The Covr Suite Shopify app

The app keeps no personal information about shoppers. Here is what each part touches:

• Covr Discount and Covr State Limit run inside Shopify’s checkout. They see the cart, and for State Limit the delivery state and whether the shopper has ordered before. Nothing about the shopper is sent to us or kept.
• Covr Cart reads the products in the store’s orders from the last 60 days to learn which products sell together. We keep those product pairs, never who bought them.
• Covr VIP reads which customer bought a membership, their lifetime spend when the store uses spend-based VIP, and their tags. It writes the membership onto the store’s own customer record in Shopify: a covr-vip tag and the dates the membership runs. We keep no copy and no list of members.

The app never reads shoppers’ names, email addresses, phone numbers or addresses. About the merchant, we keep the store’s Shopify address, name and plan, its settings for each app, and the access key Shopify gives us, which is encrypted with a key only our production systems hold.

Text messaging

When a store uses Covr Suite to text its customers from the store’s own iMessage number, we keep:

• the shopper's phone number and the texts sent and received, so a conversation can continue;
• what the store told us about the shopper's consent to be texted, with each automatic text;
• requests to stop texting (STOP), so they are honored on every number the store uses.

Replies may be written by an AI assistant following the store’s instructions, and any thread can be handed to a person at the store. Reply STOP to any message to stop texts from that store straight away.

What we never do

• We do not sell personal information or share it for advertising.
• We do not use one store's information for another store.
• Mobile numbers and texting consent are never shared with or sold to third parties or lead generators for marketing or promotional purposes.

Who else sees it

• The store. A store sees its own settings and results, and, for texting, its own conversations. It sees nothing about any other store.
• Service providers that run Covr Suite, each given only what its part needs and bound to use it for nothing else: Vercel (hosting) and Neon (database) for every app; Sendblue (delivers the texts) and Anthropic (the AI that drafts replies) for texting only. All are in the United States.
• Anyone the law requires us to tell.

How long we keep it

• Shopify app data is kept while the store has the app installed. When a store uninstalls and Shopify asks us to erase its data, 48 hours later, we delete it automatically.
• Texting history is kept while the store uses texting. On request, we delete a shopper's texts within 30 days.
• A request to stop texting is kept permanently, on purpose: forgetting it would let texting start again.

Your choices

• Stop texts: reply STOP to any message.
• Ask what we hold about you, or ask us to correct or delete it: write to support@covrprotection.com. Requests that reach us through Shopify are answered within 30 days.
• Ask the store. It controls how it uses Covr Suite and can often answer faster.

Security

Every connection is encrypted, and the database and its backups are encrypted at rest. Only the people who run Covr Suite can reach production data. Stores’ Shopify access keys are encrypted again with a key held only in our production environment.

Children

Covr Suite is not directed at children, and we do not knowingly collect information from anyone under 13.

Changes and contact

If this policy changes in a way that matters, we change the date at the top and post the new version here. Questions go to support@covrprotection.com. Merchants: the terms on how we handle your shoppers’ data are in our Data Processing Agreement.