Privacy Policy

Last updated: January 18, 2026

Introduction

RewardsMCP ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our Shopify application.

Information We Collect

When you install RewardsMCP on your Shopify store, we may collect:

Store Information: Your Shopify store domain, email, and store name
Customer Data: Customer IDs and loyalty point balances (as needed to provide our service)
Configuration Data: Your loyalty provider settings and API keys

How We Use Your Information

We use the collected information to:

Provide and maintain the RewardsMCP service
Connect your loyalty program to AI shopping agents via UCP
Process loyalty point balance checks and redemptions
Communicate with you about your account or the service

Data Sharing

We do not sell your personal information. We may share data with:

Shopify: As required to operate within the Shopify platform
Your Loyalty Provider: To sync point balances (Smile.io, Yotpo, etc.)
AI Agents: Only the data necessary to process loyalty requests (customer ID, point balance)

Data Retention

We retain your data for as long as your app is installed. Upon uninstallation, we delete all store and customer data within 48 hours as per Shopify's requirements.

GDPR Compliance

We comply with GDPR requirements including:

Responding to customer data requests
Deleting customer data upon request (customers/redact)
Deleting all shop data upon app uninstallation (shop/redact)

Security

We implement industry-standard security measures including:

HTTPS encryption for all data transmission
HMAC signature verification for all webhooks
Secure storage of API credentials

Your Rights

You have the right to:

Access your personal data
Request correction of your data
Request deletion of your data
Withdraw consent at any time

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@rewardsmcp.com

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.