Skip to content
RecentView – Viewed Products
Install from Shopify

Privacy Policy

This policy describes how SRH Web Agency (“we”) handles data for the Shopify app RecentView – Viewed Products (https://recentview.srhwebagency.com).

Operator

The app is operated by SRH Web Agency. Contact: sohilhunani11@gmail.com.

Who this app is for

RecentView – Viewed Products is an embedded Shopify Admin app that helps merchants show recently viewed products on their Online Store via a Theme App Extension. It does not create shopper accounts on our servers.

Access scopes

This app requests the following Admin API scopes: write_app_proxy, read_themes.

  • write_app_proxy — configures the signed App Proxy that serves public display settings to the storefront.
  • read_themes — reads theme files so onboarding can detect whether the app embed and RecentView block are active.

Merchant data we store

After install we store Shopify OAuth session records (shop domain, offline access token, and optional staff identity fields Shopify provides on online sessions), a Shop tenant row, and merchant ShopSettings for the RecentView widget. These live in our app database. The storefront reads a public subset of those settings through a signed Shopify App Proxy (no access tokens or staff fields are exposed). We also store billing plan and subscription identifiers returned by Shopify Billing so entitlements can be enforced server-side.

Shopper / customer data

Recently viewed product IDs are stored only in the shopper’s browser (localStorage on the Online Store). History is written only when the Shopify Customer Privacy API reports preferencesProcessingAllowed as true for that visit. When the shopper withdraws consent (or preferences processing is no longer allowed), the storefront script clears that local history. That history is not sent to or stored on our servers. We do not store shopper profiles, order personal information, or raw customer webhook payloads. If future features store customer personal information, this policy and the GDPR webhook handlers will be updated in the same change.

Support requests

Merchants can contact us from the in-app Support page. When mail is configured, the form may send the merchant’s email address and message to our support inbox via Gmail SMTP (Google acts as a mail processor). To pre-fill the form we may read the shop contact email through the Shopify Admin GraphQL API. Messages are used only to reply to support requests.

Service providers

We use the following processors to operate the app:

  • Hostinger — application hosting and persistent app database storage.
  • Google — Gmail SMTP for optional in-app support email delivery.
  • Shopify — platform authentication, Admin APIs, Billing, App Proxy, and compliance webhooks.

GDPR and Shopify webhooks

We implement Shopify’s mandatory compliance webhooks:

  • customers/data_request — we confirm no customer personal information is stored on our servers and record an audit row (shop domain, topic, webhook id).
  • customers/redact — same: no customer personal information to delete; audit only.
  • shop/redact — we purge sessions and the Shop row (settings cascade). Compliance audit rows are kept.
  • app/uninstalled — we delete sessions and mark the shop uninstalled. Merchant settings stay until shop/redact so a quick reinstall does not wipe a fresh install.

We do not persist raw webhook bodies.

Retention

Session and Shop data are kept while the app is installed. On uninstall we remove sessions and mark the shop uninstalled; shop/redact (about 48 hours later) purges the Shop row and settings unless the merchant has already reinstalled. ComplianceRequest audit rows (no personal information) may be retained to demonstrate that a request was handled.

Contact

Questions: sohilhunani11@gmail.com. You can also use the in-app Support page, visit public support, or read our Terms of Service.