# Discount Magic privacy

Last updated 18 October 2026. Last reviewed 18 October 2026. Version 1.0.
Web version: https://commitandpush.io/privacy/discount-magic/

## How this page works {#how-this-page-works}

> **In short:** This page adds the Discount Magic details to our main privacy policy. Both apply.

This page is part of the [Commit & Push privacy policy](/privacy/) and applies in addition to it. The main policy covers who we are, your rights, how to complain, our suppliers and international transfers. This page adds the details that are specific to Discount Magic. Where this page is more specific, for example about how long we keep something, this page applies to Discount Magic.

This page describes Discount Magic as it works from its launch on the Shopify App Store.

Questions about Discount Magic and your data: privacy@commitandpush.io.

## What Discount Magic does {#what-it-does}

Discount Magic is a Shopify app that helps merchants create and manage discount codes in bulk. You can generate unique codes, limit discounts to particular customers, upload and export codes, sync codes to your own Klaviyo account, and see how your discounts perform.

Discount Magic works by fixed rules you set. It doesn't use AI to make decisions about your customers.

## Data Discount Magic accesses and why {#data-accessed}

> **In short:** We read what the app needs to create discounts and show how they perform. For your customers, we store names and contact details so you can choose who a discount is for, and we never contact them.

When you install Discount Magic, Shopify asks you to approve its access. The app starts syncing your customers and orders only after you accept our terms when you first open it. Here is what the app uses that access for.

| Data from your store | Why Discount Magic needs it | Stored? |
|---|---|---|
| Store details (name, domains, Shopify plan, currency, time zone) | To set up your account and show amounts and dates correctly | Yes, while installed |
| Discounts and discount codes | To create, update and manage your discounts | Yes, while installed |
| Products, collections and markets | So you can choose what a discount applies to | Yes, while installed |
| Customers (Shopify ID, name, email, phone) | So you can limit a discount to particular customers, search for them by name or email, and tell apart customers who share a name | Yes, while installed |
| Customer segments | So you can target a discount at a segment | Yes, while installed |
| Orders (order number, customer ID, discounts used, amounts, country, language, marketing source, order notes added at checkout) | To show how your discounts perform | Yes, while installed |
| Product costs and store locations | To work out the margin on discounted sales, and whether an order was placed online or in one of your shops | Yes, while installed |

We do not store your customers' postal addresses. Shopify's order notifications include more detail than we keep, such as addresses. We hold those notifications for up to 30 days (90 days if processing fails) so we can recover from errors, then delete them.

## Data about you and your staff {#staff-data}

When you, a member of your staff or a collaborator (such as an agency or freelancer working on your store) opens Discount Magic, Shopify tells us who they are, so the app can work for them. We store:

- their Shopify user ID, name, email address and language, and whether they are the store owner or a collaborator;
- when they first and last used the app;
- their name next to changes they make, in the app's activity feed (the feed can also show the names of other staff who changed discounts in Shopify);
- answers to optional onboarding questions, such as their role and how they use Shopify, which help us tailor the app and support;
- which version of our terms they accepted and when;
- their marketing choices (see [Marketing](#marketing)).

### Stored in your browser {#browser-storage}

Discount Magic runs inside your Shopify admin. While you use it, the app and two of our suppliers keep a few small items in your browser. None of them is used for advertising.

| Item | Set by | Purpose | Lasts |
|---|---|---|---|
| app-bridge-bounce-reloads (session storage) | Discount Magic | Counts how often the app has reloaded itself while signing you in, so it can stop rather than reload forever. It holds a count and a time, nothing about you | Until you close the tab |
| sentryReplaySession (session storage) | Sentry, for us | Records whether this visit is included in a masked screen replay, and the replay's ID, so a replay covers the whole visit. We include a sample of visits, and any visit where an error happens | Until you close the tab |
| Featurebase support widget (local storage and cookies) | Featurebase, for us | Keeps the support chat, feedback and product update widgets working and signs you in to them. It also saves your support workspace's settings for about 20 minutes so the widget loads quickly | Set by Featurebase |

Product analytics are sent from our servers, not your browser, so PostHog stores nothing in your browser when you use Discount Magic. Shopify's admin, which the app runs inside, sets its own cookies under Shopify's privacy policy.

These items are needed for the app, its error monitoring and its support tools to work, and the app has no setting to turn them off. You can clear them at any time in your browser's settings. Session storage is cleared when you close the tab.

## Integrations {#integrations}

### Klaviyo {#klaviyo}

If you connect your own Klaviyo account, Discount Magic sends Klaviyo the discount codes and coupon details you choose to sync. We store a securely encrypted connection token and your Klaviyo account name. Klaviyo processes this data for you, under your agreement with Klaviyo. Disconnecting Klaviyo, or uninstalling Discount Magic, deletes the token and stops all syncing.

Discount Magic does not currently send your customers' personal data to Klaviyo. If a future feature does, we will update this page and tell you first, and the feature will be off until you turn it on.

## Service providers Discount Magic uses {#suppliers}

Discount Magic runs on the suppliers marked "Discount Magic" on our [sub-processor page](/privacy/subprocessors/). In summary:

- **Network and security**, which every request to the app passes through on its way to our servers, to protect it from attacks. It doesn't store the app's pages or data.
- **Hosting, database and caching** in the United States, with daily encrypted database backups kept for 30 days, also in the United States. See [Where your data is](/privacy/#where-your-data-is) in the main policy.
- **Error monitoring** in the United States, which records errors and app logs, and masked replays of app screens for a sample of visits and for any visit where something goes wrong.
- **Product analytics** in the United States, which records how the app is used, linked to pseudonymous identifiers and your store's domain. We may also use it to record replays of how staff use the app's screens, to find problems and improve the app. Replays are kept for no more than 30 days. Before we turn them on, we will add the browser storage they use to [Stored in your browser](#browser-storage) and give you a setting to turn them off for your store.
- **Support, feedback and product updates** through an in-app widget, stored in the European Union, which receives your name, email address, language, role in the store and your store's name, domain and plan. Messages you send can include your customers' details if you share them, and we use those only to help you. If we need to look at your store to help, we ask first: see [Support and access to your store](/privacy/#store-access).
- **Email** for messages you send to our support and privacy addresses.

In error and analytics replays we hide the parts of the app that show your customers' details, such as customer lists, the customer picker and customer search, and anything typed into fields that collect personal data. We don't hide general text such as discount titles and descriptions, so please don't put personal data in them. We can't guarantee that no personal data will ever appear in error reports, analytics or replays, but we keep it out wherever we can, and we only use this information to monitor, fix and improve the app.

Shopify also receives anonymous usage events from Discount Magic, without personal data, to help both of us understand how the app is used.

## Marketing {#marketing}

Discount Magic asks whether you want "Discount Magic updates" and "Commit & Push news" by email. Both are off unless you choose them, and you can change your mind at any time in the app's settings or through the link in any email. See [Marketing and our other apps](/privacy/#marketing) in the main policy.

## How long we keep Discount Magic data {#retention}

> **In short:** Most data stays while the app is installed and goes within 30 days of Shopify's erasure request after an uninstall. Logs, error reports and backups roll off within 90 days, and a few records are kept for longer. Some temporary data goes much sooner.

| Data | How long we keep it |
|---|---|
| Your store's app data (discounts, codes, customers, orders, settings) | While Discount Magic is installed, then deleted within 30 days of Shopify's erasure request |
| Staff details and activity feed | While Discount Magic is installed, then deleted within 30 days of Shopify's erasure request |
| Record of who accepted our terms for your store, and of when each staff member was shown our privacy policy | 6 years after you stop using all our apps, then deleted within 6 months, or longer while a claim or dispute needs it |
| A customer's data after Shopify sends an erasure request for them | Deleted within 30 days of the request |
| Code files you upload | Up to 7 days |
| Code files you export | 30 days after you last download them |
| Order notifications from Shopify | 30 days (90 days if processing fails) |
| Background job history | 7 days |
| App logs | 30 days |
| Database backups | 30 days |
| Product analytics | Deleted within 30 days of Shopify's erasure request, and otherwise kept for up to 12 months |
| Product analytics replays, if used | Up to 30 days |
| Error reports, app logs and error replays | Up to 90 days |

When you uninstall, we delete the app's access tokens and disconnect Klaviyo straight away, and the rest follows as described in [Uninstalling and deletion](/privacy/#uninstalling).

## Your customers {#your-customers}

For your customers' data, Discount Magic acts as your processor under our [Data Processing Addendum](/privacy/dpa/). We only use it to provide the app to you. We never contact your customers, sell their data, or use it for our own marketing or to train AI. If one of your customers asks you for their data, or asks you to delete it, Shopify passes the request to us and we deal with it within 30 days.

### What to tell your customers {#what-to-tell-your-customers}

As the controller of your customers' data, you need to tell them about the apps that process it. You can paste or adapt this paragraph for your store's privacy policy:

> We use Discount Magic, an app by Commit & Push, to create and manage discount codes. To do this, Discount Magic processes our customers' names, email addresses, phone numbers and order details on our behalf. You can read how Commit & Push handles this data at https://commitandpush.io/privacy/discount-magic/.

This paragraph is an example to help you get started, not legal advice. Your store's privacy policy is your responsibility: adapt it to how you use the app and to the laws that apply to your store, and take advice if you're unsure. We can't check or confirm that your privacy policy meets your legal obligations.

### When a customer asks to be deleted {#customer-deletion}

When you erase a customer's personal data in Shopify, or they ask Shopify to, Shopify sends us the request. We then:

1. remove the customer's name, email address and phone number straight away;
2. remove them from any customer eligibility lists on your discounts; and
3. delete the rest of their record permanently within 30 days of the request. Copies in our database backups are gone within a further 30 days.

Your discount usage counts and order totals still include that customer's past orders, but they no longer identify them.