We Build Shopify Plus Stores for the World’s Iconic Brands.

Privacy Policy for Product Drops Shopify App

Effective Date: December 2, 2025

Product Drops ("we," "us," or "our") is a Shopify app developed by SEEDCMS, LLC, designed to help Shopify merchants run product raffles on their online stores. We are committed to protecting the privacy and security of personal information collected through the app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Product Drops, including data from merchants, end customers, and integrations with Shopify.

This policy applies to all users of the Product Drops app, including Shopify merchants ("Merchants") and their customers ("Customers" or "you"). By installing or using the app, you consent to the practices described herein. If you disagree, please do not use the app.

We comply with applicable privacy laws, including but not limited to the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act, and Virginia Consumer Data Protection Act. This policy is not legal advice; consult a qualified attorney for specific guidance.

Information We Collect

We collect information to enable raffle functionality, such as entry management, winner selection, and notifications. Collection occurs through:

 1. Information Collected Directly from Merchants

- Account and Contact Details: Name, email address, billing information, and Shopify store URL provided during app installation or subscription.

- Configuration Data: Raffle settings, product details, entry rules, and customization preferences entered via the app dashboard.

- Usage Logs: Automatically generated data on app interactions, such as feature usage and error reports.

 2. Information Collected Directly from Customers

- Entry Information: Name, email address, phone number (optional), shipping address (for winners), and any additional fields required by the Merchant's raffle (e.g., age verification).

- Interaction Data: Entries submitted via the raffle widget on the Merchant's store, including timestamps and referral sources.

 3. Information Collected via Shopify APIs

- Store Data: Product listings, inventory details, and order history are accessed to integrate raffles with store products.

- Customer Data: Limited access to Merchant-approved customer profiles (e.g., email for notifications) via Shopify's customer API.

- Analytics Data: Aggregated store performance metrics to optimize raffle recommendations.

We do not collect sensitive personal information (e.g., health data, financial account numbers) unless explicitly required for raffle compliance (e.g., age restrictions).

 How We Use Your Information

We use collected information for the following purposes:

- App Functionality: To create, manage, and run raffles, including random winner selection and automated notifications.

- Communication: Sending raffle confirmations, winner announcements, and promotional updates (with opt-out options).

- Improvement and Analytics: Enhancing app features, troubleshooting issues, and generating anonymized reports on raffle performance.

- Compliance and Security: Verifying entries, preventing fraud, and meeting legal obligations (e.g., tax reporting for prizes).

- Marketing: With consent, sharing aggregated insights with Merchants or promoting related services.

We process data based on legitimate interests (e.g., app delivery), contract fulfillment, or explicit consent where required.

 Sharing Your Information

We do not sell personal information. We may share data as follows:

- With Merchants: Customer entry data is shared with the relevant Merchant for their raffle administration.

- Service Providers: Third parties like email services (e.g., SendGrid), payment processors (e.g., Stripe via Shopify), and analytics tools (e.g., Google Analytics), bound by confidentiality agreements.

- Shopify: As required for app integration; see Shopify's Privacy Policy for details.

- Legal Requirements: To comply with laws, respond to subpoenas, or protect rights/safety.

- Business Transfers: In mergers, acquisitions, or asset sales, with notice where required.

For Customers in the EEA/UK, data transfers outside the region use Standard Contractual Clauses or adequacy decisions.

 Data Retention

We retain information only as long as necessary:

- Merchant Data: For the duration of your subscription plus 30 days post-uninstall, or longer for legal/tax purposes (up to 7 years).

- Customer Data: Until the raffle ends plus 90 days for winner fulfillment, or as directed by the Merchant.

- Logs and Analytics: 12 months for operational needs.

Deleted data is securely erased or anonymized. You may request deletion at any time (see "Your Rights" below).

 Data Security

We implement reasonable administrative, technical, and physical safeguards, including encryption (e.g., HTTPS, AES-256), access controls, and regular audits. However, no system is infallible; we cannot guarantee absolute security.

 Cookies and Tracking Technologies

The app uses cookies and similar tools (e.g., pixels) for functionality, analytics, and preferences. These are placed on the Merchant's store via the raffle widget. You can manage browser settings to limit them, but this may affect app performance. We do not use cookies for targeted advertising without consent.

Children's Privacy

Product Drops is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from minors. Merchants must ensure raffles comply with age restrictions (e.g., 18+ for certain prizes). If we learn of underage data, we will delete it promptly.

Your Privacy Rights

Depending on your location, you may have rights to:

- Access, correct, or delete your data.

- Restrict or object to processing.

- Portability (receive data in a usable format).

- Withdraw consent (where applicable).

- Opt-out of sales/sharing (e.g., via CCPA "Do Not Sell" signals).

To exercise rights, contact us (below). We respond within 45 days (extendable). Merchants handle Customer requests on their behalf; we assist as needed. Verified requests only—no discrimination for exercising rights.

For GDPR/CCPA: Designated contact for EU/CA residents available upon request.

 International Data Transfers

We are based in the United States. Data may be processed globally via providers. For EEA/UK transfers, we use approved mechanisms to ensure equivalent protection.

Changes to This Privacy Policy

We may update this policy to reflect changes in practices or laws. Significant updates will be notified via email or in-app notice. Continued use constitutes acceptance.

Thank you for trusting Product Drops.