Privacy Policy.

This policy explains what personal information the Miko apps handle, why, who helps us process it, and how long we keep it. It also covers the miko.co.nz website. It is written for merchants who install our apps and for their customers who want to know what happens to their data.

1. Who we are

Miko Apps is a brand of Tripster Developers Limited (NZBN 9429051238919), a New Zealand company, trading as Tripster Developers, Auckland, New Zealand. Privacy officer: Pratham Jani, founder. Email: hello@tripsterdevelopers.com.

2. Our role: merchant data and shopper data

• Merchant data (your store details and the contact details of you and your staff): we are responsible for it and decide how it is used.
• Shopper data (information about your customers that an app processes for you): you, the merchant, are responsible for it. We process it only on your instructions, only to run the app, and under the Shopify API Terms and this policy. That makes us your service provider (a "processor" under the GDPR and a "service provider" under California law). Please describe the apps you use in your own store privacy policy.

We never sell shopper or merchant data, never use it for advertising, and never use it to train AI models.

3. What every app collects

When you install any Miko app, Shopify gives us:

• your store name, myshopify domain, plan and country;
• the name and email address of the store owner, used for service emails (welcome, setup help, review request, billing and uninstall notices);
• the name and email address of each staff member who opens the app, and an access token, so the app can sign you in;
• the store data the app's permissions allow, described per app below.

We also record errors (with your store domain, not shopper details) to fix bugs, using Sentry.

4. App by app

Miko Loyalty and Rewards

• Shopper data: customer ID, name, email, birthday (if the shopper gives it for a birthday reward), referral code, points balance, tier, and the order IDs and discount codes behind each points change.
• Why: to award and redeem points, run tiers, birthday rewards and referrals.
• Storefront: the loyalty widget stores the shopper's referral code in their browser (localStorage). A web pixel counts page visits for your dashboard; it sends only your store and the event type, no shopper identifiers, and it respects your store's analytics consent settings.
• Providers: Railway (hosting and database), Resend (service emails to the merchant only).
• Deletion: a customer redaction request deletes that customer's member record and points history.

Miko B2B Wholesale Hub

• Shopper data: for wholesale registration and quote forms: company name, contact name, email, phone, address, tax ID, website, notes, any custom fields you add, the IP address and browser details of the submission (for spam and fraud checks), and purchase orders (buyer name, email, items).
• Why: to approve wholesale buyers, apply their prices, and handle quotes and purchase orders.
• Storefront: a cookie (miko_b2b_campaign, 30 days) remembers a wholesale campaign link, and the browser stores cached prices and a draft purchase order (up to 14 days).
• Providers: Railway, Resend (approval and rejection emails to buyers, and new-application and quote alerts to you).
• Retention: registrations and quote requests are kept while the app is installed, and deleted with the rest of the store's data.
• Deletion: we act on customer redaction requests within 30 days.

Miko AI (customer churn and segments)

• Shopper data: customer ID, name, email, tags, order count, total spend, last order date and the scores the app calculates (churn risk, VIP likelihood, lifetime value, segment). Tags starting with "miko-" are written back to the customer in Shopify.
• AI: we use Anthropic's Claude to write summaries and suggested messages. We send segment names, counts, revenue figures, store name and top product titles, and for an automated message one customer's order count, spend and churn risk, with no name or email. We use Anthropic's commercial API.
• Email to shoppers: if you turn on automations, the app sends emails to your customers through Resend using your own Resend account.
• Integrations you choose: if you connect Klaviyo or Brevo, the app sends the customer's email, name, scores, spend and segment to your account there. You decide whether to connect these services, and you are responsible for your marketing consent records there.
• Retention: segment snapshots are kept for 90 days. You can clear all app data from Settings at any time.
• Deletion: a customer redaction request deletes that customer's scores, tag history and automation log.

Miko AI Descriptions and Narrate

• Shopper data: none. The app reads and writes products only.
• AI: we send product titles, vendor, variants, existing descriptions and product images to Google Gemini to write descriptions and summaries, and any question you type into "Ask Miko".
• Storefront: the Listen button uses the shopper's own browser speech, so no audio is created or stored. The button asks our server for the product summary; we use the visitor's IP address briefly in memory to prevent abuse and do not store it.
• Providers: Railway, Google Gemini, Resend (merchant emails), Sentry.

Miko Product Rentals

• Shopper data: from rental orders: customer name, email, phone, rental dates, deposit status and your notes, plus a log of booking emails sent.
• Why: to manage bookings, availability, deposits, reminders and late fees.
• Providers: Railway, Resend or your own email server (SMTP) for booking confirmations and reminders to your customers.
• Deletion: we act on customer redaction requests within 30 days.

Miko Restock: Inventory and PO

• Shopper data: none. From orders we read only the order date and the quantity of each item, never names, emails, phone numbers or addresses. We store daily sales counts.
• Supplier data: supplier names, emails and phone numbers you enter. Purchase orders you send are emailed to the supplier through Resend, with you as the reply-to.
• AI: supplier invoices and spreadsheets you upload are sent to Google Gemini to read the line items.
• Providers: Railway, Resend, Google Gemini, Sentry.
• Deletion: store data is deleted after a shop redaction request, as described in section 6.

Miko Bulk Image Resizer

• Shopper data: none. The app reads and writes product and collection images only.
• What we keep: a copy of each original image for 30 days on our hosting provider so you can undo a run, then deleted automatically; a record of each run; your settings and any watermark logo.
• One record kept after deletion: a one-way hash of your store domain and the number of free images left, only to stop the free allowance being claimed again by reinstalling. It cannot be turned back into your store's identity.
• Providers: Railway, Shopify (usage billing), Resend (merchant emails), Sentry.

Authentica: COA Certificates

• Shopper data: buyer name and email from the order, order number and purchase date, and the certificate's current owner. If a certificate is transferred, the names and email (optional) typed on the public verification page, and, when you require verified transfers, the email addresses of the current and new owner used to confirm it. A change log of what happened to each certificate (issued, transferred, revoked, replaced) and who did it. If you use private photos (Pro), the photos you upload of a piece, for example at dispatch or on return, visible only to you in the app. When someone scans a certificate, we store a one-way hash of their IP address and their country, to show scan activity and spot counterfeits.
• Backups: a daily backup of Authentica's database (excluding sign-in sessions) is kept in encrypted object storage in the United States for 30 days, plus one per month for 6 months. Private photos are kept in the same encrypted storage; deleted photos can be restored for 30 days and are then removed.
• Providers: Railway (hosting, database and encrypted object storage), Resend (certificate and transfer emails), Google Fonts (font files for the public certificate page, so a visitor's browser sends its IP address to Google). If you connect them: Klaviyo (buyer email, certificate serial, product and current owner) and a webhook address you choose, such as Zapier (buyer name and email, current owner).
• After uninstall: certificates stay verifiable until Shopify sends the shop redaction request 48 hours later. We then delete the store's certificates, verification pages and scan records.
• Deletion: we act on customer redaction requests within 30 days.

Miko Subscribe and Save

• Shopper data: subscriber customer ID and email, subscription products, prices, schedule and status, billing attempt outcomes, delivery status, the cancellation reason a subscriber types, and a churn score. We see whether the payment method behind a subscription is working, never card or bank details.
• Customer portal and AI assistants: subscribers manage their subscription in a portal inside your store. A subscriber can issue a key that lets an AI assistant of their choice manage that one subscription; the key expires after 30 days and can be revoked.
• AI: Google Gemini receives only churn signals (risk band, risk factors, number of deliveries, value of one delivery), never names, emails or order contents.
• Providers: Railway, Resend (subscriber welcome emails and merchant reports), Google Gemini, Sentry. Card update emails are sent by Shopify.
• Deletion: a customer redaction request removes the subscriber's email and ID, their AI keys, logged notes and typed cancellation reason. Subscription records are kept while the app is installed.

Miko AI Help Center & FAQ

• No shopper personal data: this app reads your store's own settings (shipping zones, policies, local pickup, markets, existing FAQ pages and languages) and writes answers from them. It does not read orders, customers or any shopper's personal information.
• What is stored: the store facts it read, the questions and answers it writes, an edit history of each answer, and which languages your store publishes in.
• AI: Google Gemini receives the store facts above to draft an answer's wording. It never receives shopper names, emails or order contents, because the app never reads them.
• Providers: Railway (hosting and database), Google Gemini (answer drafting), Resend (merchant emails), Sentry (error monitoring).
• After uninstall: answers already published to your store's own Page and Knowledge Base belong to you and are not ours to delete. Everything we hold (store facts, answers, edit history) is deleted 48 hours after uninstall, when Shopify sends the shop redaction request.
• Customer data requests: there is nothing to export or delete, since no shopper personal data is held.

Live Connector for Odoo

• Shopper data: customer names, emails, phone numbers, billing and shipping addresses and orders, synced between Shopify and your Odoo database. For B2B customer login, a hashed password and reset token.
• Where it goes: your own Odoo database, using credentials you give us (your Odoo password is stored encrypted). Orders that fail to sync are kept until retried or cancelled; sync logs are deleted after 14 days.
• Providers: Render (hosting), Supabase (database), Redis (job queue), our email server for login emails, Sentry (without personal data), and Anthropic Claude for an optional summary report that contains counts only.
• Deletion: we act on customer redaction and shop redaction requests within 30 days. Records the connector created in your own Odoo database are yours to manage.

5. Our service providers (sub-processors)

We will update this list before adding a new provider that handles shopper data.

6. How long we keep data and what happens when you uninstall

• When you uninstall, the app stops accessing your store straight away and we delete your sign-in sessions.
• Shopify sends us a shop redaction request 48 hours after you uninstall. We then delete all of your store's app data, including shopper data, within 30 days of that request, except the narrow items named in each app section above. Shopify requires deletion within 30 days.
• If you reinstall within those 48 hours, your data is still there.
• Where an app keeps backups, its section above says how long. Deleted data leaves those backups when they expire, at most 6 months later for Authentica.
• When a shopper asks you to delete their data, Shopify sends us a customer redaction request and we delete or anonymise that shopper's data within 30 days.
• When a shopper asks you for their data, Shopify sends us a customer data request and we send you what we hold about that shopper within 30 days, so you can answer them.

7. Security

• All connections to our apps use HTTPS.
• Each merchant's data is separated by store in the database, and every request is checked against the signed-in store.
• Access tokens are stored server-side and never exposed to the storefront.
• Credentials you give us are stored server-side and never shown in the storefront.
• Only the people who maintain the apps can access production systems.

If a breach affects shopper data, we will tell affected merchants without undue delay, and notify the New Zealand Privacy Commissioner and affected people where the Privacy Act 2020 requires it.

8. Rights and requests

• Merchants: email hello@tripsterdevelopers.com to get a copy of your data, correct it, or have it deleted. We reply within 20 working days.
• Shoppers: please contact the store you bought from. The store can use Shopify's privacy tools, which send the request to us automatically. You can also email us and we will pass your request to the store and help them respond.
• If you are in the EEA, UK or Switzerland you also have the rights to object, restrict processing, portability and to complain to your data protection authority. In New Zealand you can complain to the Office of the Privacy Commissioner (privacy.org.nz).

9. International transfers

Our apps are run from New Zealand and hosted mainly in the United States. We take reasonable steps to make sure overseas providers protect personal information to a standard comparable to New Zealand law, and for EEA and UK data we rely on Standard Contractual Clauses or the EU-US Data Privacy Framework for transfers to the United States.

10. The miko.co.nz website

• Analytics: Google Analytics 4 records the pages you view, referrer, approximate location and device, using cookies (_ga, up to 2 years). Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent before analytics cookies are set, and anyone can change their choice with the "Cookie settings" link in the footer.
• Fonts: pages load fonts from Google Fonts, which means your browser sends your IP address to Google.
• Contact form: the form is sent to our own web server, which emails your name, email, topic, store URL and message to our Google Workspace inbox and keeps a private copy so no enquiry is lost if email fails. Before it is sent, Cloudflare Turnstile checks that a person, not a spam bot, is using the form; for that check Cloudflare sees your IP address and basic browser signals. It sets no advertising or tracking cookies.
• Security: the site is served through Cloudflare and hosted by Namecheap; both see your IP address.
• Retired AI Visibility Check: earlier in 2026 we ran a free AI Visibility Check that collected store URLs, email addresses and business descriptions. The tool is closed, and the stored submissions will be deleted by 26 October 2026.

11. Children

Our apps are for businesses. We do not knowingly collect information from children under 16.

12. Changes

We will update this policy when our apps change. The date at the top is the latest version. We will tell installed merchants about significant changes by email or in the app.

13. Contact

Tripster Developers Limited (NZBN 9429051238919), trading as Tripster Developers and Miko Apps, Auckland, New Zealand. hello@tripsterdevelopers.com.