Privacy policy
Last updated: November 2, 2026
Drawerly (“the App”) is a Shopify app made by Centubo (“we”, “us”). This policy explains what information the App collects when a merchant installs it on a Shopify store, how we use it, and the choices you have.
Permissions the App requests
| Shopify permission | Why we need it |
|---|---|
read_products | to let you pick products and collections for upsells, gift wrap and free gifts, and to check they are still available |
read_orders | to receive Shopify's order notifications and record what the cart added to each order (upsell and add-on items, the reward reached) and the order total, for your results. Drawerly does not read customer names, emails or addresses |
write_discounts | to create and update one automatic discount, “Drawerly cart rewards”, that applies your rewards at checkout |
write_files | to upload the empty cart image you choose to your store's Files |
Information we collect
| What | Why |
|---|---|
| Store information: your store's myshopify domain, Shopify shop ID, currency, time zone, country, plan type (live, trial or development) and install date. | To run the app for your store. |
| Access credentials Shopify issues to the app, and session details Shopify provides when a staff member opens the app. | To call the Shopify API on your behalf and sign you in to the app. |
| Your cart settings: texts, translations, colors, the products and collections you picked, the empty cart image link, the ID of the rewards discount and the tips you dismissed. | To show your cart on your store and apply your rewards. |
| For orders the cart added value to: the order ID, order total, currency, the amount and number of upsell and add-on items, the reward reached, and the order and cancellation dates. For all orders, a count of orders and revenue per day. | To show your results and compare average order values. |
| Order notifications (webhooks) sent by Shopify, kept so they can be processed reliably and retried after an error. They are deleted automatically 7 days after processing, and at the latest after 30 days. | To record your results. We do not read or use customer details, gift messages or order notes that may be included. |
We do not collect payment card details.
Shoppers on your store
On your store, the Drawerly cart runs in the shopper's browser and talks only to your store's Shopify cart: it does not set cookies, does not track shoppers and sends nothing about them to our servers. It marks the items it adds with a hidden line property and the reward reached with a hidden cart attribute, so the order shows what the cart added. For the length of the visit, the browser's session storage remembers free gifts the shopper removed, so they aren't added again. Gift messages and order notes go to the order in Shopify, not to Drawerly. We do not collect shoppers' names, email addresses or postal addresses.
How we use information
- To provide, maintain and improve the App.
- To show you the results the App brings to your store.
- To answer support requests and send important notices about the App, such as pricing changes.
We do not sell personal information and we do not use it for advertising.
Sharing
We share information only with:
- Shopify, to run the App.
- Service providers that host and operate the App for us (cloud servers, database backups, email), under contracts that require them to protect the data and use it only for our purposes.
- Authorities, when the law requires it.
Storage, security and retention
- Data is stored on secured servers and transferred over encrypted (HTTPS) connections.
- We keep your data while the App is installed on your store.
- When you uninstall the App, Shopify asks us to erase your store's data 48 hours later. We then delete it from our database. Backups that contain it are overwritten within 30 days.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete personal information about you, and to object to how we use it. Merchants can ask us at [email protected]. Shoppers should contact the store they bought from. We respond to data requests that Shopify forwards to us, including requests made under the GDPR and the CCPA.
Changes to this policy
We may update this policy when the App changes. We will change the date at the top, and tell merchants in the App about important changes.
Contact
Questions about this policy or your data: [email protected].