Privacy Policy

This policy explains how BestAppify handles personal data when you use bestappify.app, the dashboard, or our API. We are the data controller for that information.

1. What we collect

Information you give us

• Account details — name, email address, password (we store only a hash), and company name if you provide one.
• Billing details — billing name, address and country, plus the last four digits and expiry of your card. Full card numbers go directly to Stripe and never reach our servers.
• Content you submit — the apps you track, competitors you add, notes, support messages, and anything you enter into forms.

Information from accounts you connect

If you connect a Shopify Partner or Google account, we collect only what the feature needs — for example app performance and search metrics — and only for as long as the connection is active. You can disconnect at any time from your dashboard.

Information we collect automatically

• Usage data — pages visited, features used, and actions taken in the dashboard.
• Technical data — IP address, browser and device type, and timestamps, recorded in server logs.

Public App Store data

BestAppify continuously crawls the public Shopify App Store — listings, pricing, ratings, reviews, categories and publicly listed developer names. This is public business information, not private personal data, and it powers our leaderboards and intelligence features. If you are a developer and want your publicly listed details reviewed, contact us at business@bestappify.com.

2. Why we use it

• To create and run your account, and to provide the features you use.
• To take payment, send invoices, and manage your subscription.
• To send service emails — receipts, security notices, and alerts or digests you have turned on.
• To provide support and answer your questions.
• To keep the Service secure, prevent fraud and abuse, and enforce our Terms.
• To understand how the product is used, so we can improve and fix it.
• To send marketing emails, where you have opted in or where allowed by law. Every marketing email has an unsubscribe link.

We do not sell your personal data, and we do not share it with advertisers.

3. Legal bases (UK/EU users)

Where the GDPR applies, we rely on: contract, to provide the Service you signed up for; legitimate interests, to secure, analyse and improve the Service; consent, for optional marketing and non-essential cookies; and legal obligation, for tax and accounting records.

4. AI processing

Some features send your content — such as an app listing you want audited — to AI providers to generate a result. We use these providers under agreements that prohibit training their models on our customers' data. Don't submit sensitive personal information into AI-powered fields.

5. Who we share data with

We share personal data only with service providers who help us run BestAppify, under contracts that limit them to our instructions:

We may also disclose data if required by law, to protect our rights or someone's safety, or as part of a merger or acquisition — in which case we will notify you before your data becomes subject to a different policy.

6. International transfers

Our providers are largely based in the United States, so your data may be processed outside your country. Where required, transfers out of the UK/EU rely on Standard Contractual Clauses or another approved safeguard.

7. Cookies

We use cookies that are strictly necessary to keep you signed in and to keep the site secure. We also use privacy-respecting analytics to understand aggregate usage. We do not use third-party advertising or cross-site tracking cookies. You can block cookies in your browser, though sign-in will stop working.

8. How long we keep it

• Account and content data — while your account is active, then deleted within 90 days of account closure.
• Billing and tax records — up to 7 years, as required by law.
• Server logs — up to 12 months.
• Aggregated, de-identified data — may be kept indefinitely, as it can no longer identify you.

9. Security

Data is encrypted in transit and at rest, access to production systems is restricted and logged, and passwords are hashed. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant regulator as the law requires.

10. Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to or restrict processing, receive it in a portable format, and withdraw consent at any time. Canadian users have equivalent rights under PIPEDA, and California residents under the CCPA — including the right not to be discriminated against for exercising them.

Email business@bestappify.com and we will respond within 30 days. If you are unhappy with our response, you can complain to your local data protection authority, or to the Office of the Privacy Commissioner of Canada.

11. Children

BestAppify is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes

We may update this policy. If a change is material we will email account holders or show a notice in the product before it takes effect. The date at the top always reflects the current version.

13. Contact

For any privacy question or request, email business@bestappify.com.