Privacy Policy

Spotly: Shop the Look · Last updated October 28, 2026

Spotly: Shop the Look (“Spotly”, “we”, “us”) is a free Shopify app by Boost Apps that lets a merchant turn a photo into a shoppable image, with dots that open product cards, on their online store. This policy explains what data we handle and how.

Store data we access

Spotly uses only one Shopify permission:

• read_themes: to check whether the Shop the Look block has been added to a template of your published theme, so the app can show you its setup status. Spotly never changes your theme.

Spotly does not request access to your products, orders, customers or any protected customer data. The products shown in a block are read by your theme, on Shopify’s servers, when the page is built.

Information we store

Your Spotly settings (dot style, product card style, colors and corners) and the app’s Shopify session are stored in your own store as Shopify metafields.

Our servers run on Cloudflare. Cloudflare Workers KV holds the store’s Shopify access token and session and your admin language choice.

Our internal admin service (Boost Apps admin, backed by a Supabase database) keeps a record for each store that installs the app: store domain, store name, store email, shop owner name, primary domain, country, currency, Shopify plan, install/uninstall dates and, while the app is installed, the Shopify access token. We use this record to support you and to send emails.

Storefront behaviour

The block is rendered by your theme on Shopify’s servers from your saved settings. The image and the products are the ones you choose in the theme editor and are served by Shopify. A very small script in the shopper’s browser opens the product cards and, when a shopper presses Add to cart, adds the item with Shopify’s own cart endpoint on your store’s domain. Spotly sets no cookies and has no tracking, and shoppers’ browsers never contact our servers. Nothing about shoppers is collected or sent to us or to any third party.

Emails

We send a welcome email when you install the app and a goodbye email when you uninstall it, and occasional product update emails to the store email. Emails are delivered through Resend. Every promotional email contains an unsubscribe link.

Service providers

We do not sell or rent your data. We use these service providers to run the app:

• Cloudflare: app hosting and storage of access tokens and sessions.
• Supabase: database for the store records described above.
• Resend: delivery of the emails described above.
• Tidio: live chat loaded only inside the app’s admin (never on your storefront) so you can reach our support team. So we can help without asking for details first, the chat receives your store’s name, myshopify address, website, contact email, Shopify plan and country, the name, email and role of the staff member using the app, and which app page they are on. It never receives any data about your customers. Messages you send and basic technical data (such as your IP address) are processed by Tidio under their privacy policy.

Data retention and deletion

When you uninstall Spotly, we delete the cached access token and session within minutes. Settings stored as metafields are removed by Shopify with the app. Shopify’s shop/redact request, sent 48 hours after an uninstall, removes anything left. Because Spotly never stores customer data, customers/data_request and customers/redact requests have nothing to return or erase.

Your rights

You can ask us to access, correct or delete the data described above at any time by emailing boostappspro@gmail.com.

Contact

Boost Apps · boostappspro@gmail.com