Legal

Notiva-Privacy

Last updated: August 3, 2026

Notiva (“Notiva”, “we”, “us”) is a Shopify app operated by Twinecom. This policy explains what personal data the app collects, how we use it, who we share it with, and the choices available to you. It applies to merchants who install Notiva and to shoppers who use Notiva features on a merchant’s storefront.

1. Information we collect

From merchants (the store):

Your store’s myshopify.com domain and access token (to operate the app).
App settings you configure: email template, sender name, notification preferences, and plan.

From shoppers (your customers):

Email address, when a shopper requests a back-in-stock alert.
The product and variant a shopper is interested in or saves to a wishlist.
The Shopify customer ID of a logged-in shopper who saves items to a wishlist.

We do not collect payment card details, passwords, or general browsing history.

2. How we collect it

Through the storefront widget when a shopper submits an email or saves a product, sent to us via Shopify’s App Proxy (each request is verified with Shopify’s HMAC signature).
Through Shopify’s Admin API and webhooks (for example, inventory updates) to detect restocks and keep product details current.

3. How we use it

To send back-in-stock and confirmation emails to shoppers who requested them.
To show merchants their waitlist and demand data so they can decide what to restock.
To operate app features (wishlist, low-stock badges, pre-order notices).

We do not sell personal data, and we do not use it for advertising or profiling.

4. Third parties we share data with (subprocessors)

Shopify — the platform your store runs on and our source of store data.
Resend (resend.com) — email delivery. Shopper email addresses and message content are sent to Resend to deliver alerts.
Railway (railway.app) — application hosting and database storage.

These providers may process data in the United States and other regions. We share only what is needed to provide the service.

5. Data retention and deletion

Waitlist entries are kept until the shopper is notified, unsubscribes, or the data is deleted.
We honor Shopify’s mandatory data-privacy webhooks: on a customer redaction request we delete that shopper’s data, and when a store is uninstalled or requests shop redaction we delete all data associated with that store.
Shoppers can unsubscribe from emails at any time using the link in every message.

6. Your rights

Depending on your location (for example, under GDPR or CCPA), you may have the right to access, correct, or delete your personal data. Shoppers should first contact the merchant whose store they interacted with. Merchants and shoppers may also contact us directly and we will assist.

7. Security

Data is transmitted over TLS/HTTPS and stored in access-controlled infrastructure. Storefront requests to the app are authenticated using Shopify’s HMAC signature.

8. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the current version.

9. Contact

Questions or data requests: notiva@mail.twinecom.com.
Notiva · Terms of Service