ShopMailPrivacy policy
Last updated October 3, 2026
ShopMail is a Shopify app, operated by Triple Layer, that sends marketing and order emails on behalf of Shopify merchants. This policy explains what data the app handles, why, and for how long. Merchants are the controllers of their customers’ data; ShopMail processes it on their behalf.
What we collect from the merchant’s store
- Store details: name, contact email, currency, postal address and domain, used for the email footer and sender name.
- Customers: email address, first and last name, email marketing consent, number of orders, amount spent and last order date.
- Orders and abandoned checkouts: order number, email, items, totals, fulfilment and tracking details, and the checkout recovery link.
We never receive payment details. Shopify lets ShopMail read customer phone numbers and postal addresses, because order and checkout events include them. Today we do not copy them into our records or use them: they exist only inside the raw Shopify event, which is deleted after 14 days. If we start using them, for example to show a delivery address in a shipping email, this policy will say so first.
What we record when emails are sent
- Each email sent: recipient, subject, time and delivery outcome (delivered, bounced, marked as spam).
- Opens and clicks: the time, the link clicked and the browser’s user agent. We do not store IP addresses.
- Unsubscribes, bounces and spam reports, kept as a suppression list so that address is never emailed again by that store.
Signup forms and popups
When a visitor signs up through a store’s form or popup, we record their email address, marketing consent, signup time and source, and any prize or discount issued. We update their subscription in Shopify. We count popup views and signups so merchants can measure performance. The storefront uses browser storage to remember popup display preferences and completed signups.
Service activity and error monitoring
We record store setup milestones, times and usage counts to understand onboarding and improve the service. We also record technical error information, such as the affected page or operation, time, error category and store reference, to diagnose failures and protect reliability. Diagnostic records are designed to exclude customer email addresses, message content, passwords and access credentials.
How we use it
- To send the emails the merchant turns on or schedules, and only marketing emails to customers who subscribed in Shopify.
- To show the merchant results such as opens, clicks and revenue from emails.
- To protect deliverability, for example pausing a store’s marketing if too many emails bounce.
- When a customer unsubscribes, we update their consent in Shopify so the merchant’s other tools respect it.
We do not sell data, share it for advertising, or use it to train AI models.
Who processes it
- Email delivery services process recipient addresses and email content to send messages and report delivery outcomes.
- Hosting and storage services process store data to operate ShopMail.
- Website security and support communication services process requests and messages to keep the website available and respond to you.
Service providers receive the data needed for their work on our behalf. They may process data in the United States or other countries outside your own. Contact us for information about the providers handling your data and applicable international transfer arrangements.
How long we keep it
- Store records, signup records, email activity and setup milestones are kept while needed to provide the service, subject to deletion requests and store erasure.
- Standalone diagnostic error records are retained for up to 90 days after their last occurrence.
- Incoming data from Shopify is processed and the raw event deleted after 14 days.
- When a merchant uninstalls ShopMail, all of their store’s data is erased when Shopify sends the shop erasure request. Shopify normally sends this request 48 hours after uninstall; deletion is processed after it arrives.
- When a customer asks a merchant to erase their data, Shopify tells us and we delete that customer’s records, emails and events.
How we protect it
- Everything travels over encrypted connections (HTTPS).
- Merchants sign in through Shopify, and every message Shopify sends us is checked to be genuinely from Shopify before we use it.
- Unsubscribe and tracking links in emails are signed, so they cannot be forged or changed.
- Only the Triple Layer team can reach store data, only to run and support ShopMail, and access to our own admin tools is protected and logged.
- Passwords, access keys and store tokens are never written to our logs.
If a security incident affects a store’s data, we will tell that merchant without undue delay, with what happened and what we are doing about it.
Our website
Our public website does not use advertising cookies. Our website service providers may process request information, including IP addresses, for security and aggregate usage measurements, and may use strictly necessary security cookies. Website fonts are served with the website.
Your rights
If you are a merchant, you can ask us for a copy of your store’s data, or to correct or delete it, by emailing privacy@shopmailapp.com.
If you are a customer of a store that uses ShopMail, contact that store to access, correct or delete your data; they can do this through Shopify, and we act on their request. You can stop marketing emails at any time with the unsubscribe link in every email.
Children
ShopMail is a tool for businesses and is not meant for children. We do not knowingly collect data from children under 16 other than as a store’s customer, under that store’s own policies.
Changes to this policy
When we change this policy we update the date at the top. If a change matters to how your data is handled, we will tell merchants in the app before it takes effect.
Contact
Questions about this policy or your data, from Triple Layer: privacy@shopmailapp.com