Privacy policy

Updated September 7, 2026.

BannerTow is operated by Joshua Ball in Florida, United States. Contact support@faezr.com about this policy or your information.

Information we process

We process Shopify store identifiers and authentication sessions to provide the app. Sessions can include access and refresh tokens, permissions, expiry times, and merchant account information such as name, email address, Shopify user ID, locale, and account-owner status. Shopify subscription information determines access to plan features.

Banner settings are stored in your Shopify theme configuration. BannerTow’s application database does not store storefront customer profiles, product records, or order records. Shopify may send information in required privacy requests; our handlers do not store the customer request payloads.

We keep limited webhook receipts containing an event identifier, topic, hashed store identifier, processing time, and expiry time to prevent duplicate processing. When you contact support, we receive the contact details and information you include in your message.

How information is used and shared

We use information to authenticate merchants, provide and configure banners, manage feature access, answer support requests, prevent duplicate event processing, and meet applicable obligations.

Shopify provides the app platform, theme configuration, and subscription billing. Render hosts our application and database in Ohio, United States. Cloudflare handles traffic for our custom domain. Forward Email (forwardemail.net) provides our support email service and processes support correspondence. These providers may process technical connection information, such as IP addresses and request logs, when delivering their services.

The BannerTow storefront extension does not provide impression or click analytics and does not set advertising-tracking cookies. This policy covers BannerTow; the merchant’s store and other installed services have their own data practices.

You can read Forward Email’s privacy policy for its email-processing practices.

Retention and deletion

Authentication sessions are deleted when we process Shopify’s valid uninstall notification. Shopify’s store-redaction notification deletes remaining sessions and existing receipts associated with the store; a receipt of the redaction event is then recorded.

Webhook receipts have a 30-day expiry. The running app checks hourly for expired receipts and also checks on startup. Deletion can be delayed during downtime or database failures; later sweeps retry cleanup. Backup copies remain until the provider’s retention period ends. Support correspondence and service logs are retained as needed to resolve requests, operate the service, and meet applicable obligations. Contact us to request deletion.

Uninstalling BannerTow does not itself delete theme settings controlled by Shopify.

Your requests and international processing

You can contact us to request access to, correction of, or deletion of your information. Depending on applicable law, you may also have rights to portability, restriction, objection, or to complain to a data protection authority. We may verify your identity or authority over a store before responding.

We operate in the United States. Our providers may process information in the United States and other countries where they operate.

Security and changes

No method of transmission or storage is completely secure. Do not send passwords or access tokens to support. We will update this page when our practices change and provide further notice where required.