Privacy policy
Last updated: 10 October 2026
PromoEasy is operated by TRENDY DESIGNS LLC. For privacy questions or requests, email info@webtorn.com and identify the relevant store. Do not send passwords, access tokens or payment information.
Information we use and why
We process the shop domain and identifier, Shopify authentication sessions and access scopes, subscription status, campaign settings, product and collection information, and discount identifiers to operate the app. PromoEasy does not request access to Shopify orders, customer profiles or payment details.
Merchants can import review author names, optional image links, review text, ratings, source references and product or collection assignments. Merchants must have permission to use this material and publish only authentic reviews. Imports start as drafts. Published names, images, ratings and review text are displayed to visitors on the assigned storefront pages.
When a shopper requests an Instagram reward, we receive their submitted Instagram username, post link, selected product details and request time. The merchant sees the request inside PromoEasy in Shopify admin and manually approves or rejects it. Instagram sharing is not automatically verified, and the app does not access the shopper’s Instagram account. Approved rewards are single-use bearer discount codes: anyone holding a code can redeem it under the store’s offer conditions.
Storage, hosting and recipients
Shopify provides authentication, app billing, product data and checkout discounts. Vercel hosts the application and processes web requests and operational logs. Neon hosts the app’s dedicated PostgreSQL database in Frankfurt. These providers may process information in other locations according to their services. Imported image URLs are loaded from the image host chosen by the merchant; that host receives ordinary browser request information.
We use this information to provide the requested features, secure the service, troubleshoot errors and answer support requests. We do not sell review or reward-request information or use it to build advertising audiences. Support messages are handled by our own team through our business email service.
Browser storage
Inside the merchant app, a small per-store browser record remembers the first visit time, up to three distinct visit days, and whether an optional App Store review invitation was dismissed. It is used only to delay or suppress that invitation, stays on your device, and is not sent to our server. It does not contain a rating or review text. Clearing site data resets this preference and the waiting period.
Language preferences can be saved in a cookie and browser storage. Storefront storage remembers popup frequency and a shopper’s private reward-request lookup token. The database stores a hash of that token. Clearing site data can remove the ability to retrieve a pending reward in that browser. The separately labelled public demo stores its examples only in the browser and does not change a Shopify store.
Retention and removal
We retain shop configuration and imported reviews while needed to operate the installation. Imported review content is read-only, including author, rating, text, photo, source, date and product or collection assignment. Merchants can publish, unpublish or delete a review, but cannot edit its content, including after unpublishing. PromoEasy does not verify purchases or independently certify review authenticity. Reward lookup access expires after 30 days; expiry does not itself delete the merchant’s request record. Uninstalling clears app sessions and subscription-state cache. Shopify’s signed shop-redaction notification triggers deletion of the shop’s app database records. Shopify-hosted discount records and infrastructure logs or backups follow their respective providers’ retention policies.
Your choices and requests
For review removal, reward requests or store-specific offer questions, contact the store first. You may also contact us at info@webtorn.com to request access, correction or deletion of information we hold. We may ask for information needed to verify the request and locate the record, and coordinate with the merchant where appropriate. You can stop submitting optional reward requests and clear browser storage at any time.
Merchants are responsible for their storefront privacy notices, lawful use of imported reviews, offer terms and any consent required for their campaigns. If this policy changes, we will update this page and its date.