GeoMorphGeoMorph (“GeoMorph”, “we”, “us”) provides a Shopify application that applies country-based rules — redirect, block, hide and blur — to a merchant’s storefront. This policy describes the data we process, why we process it, and the choices available to you. It applies to the GeoMorph app and the marketing site at gm.swonie.com.
1. Data we process
Merchant & store data
- Store information provided by Shopify when you install the app: store domain, shop ID, store owner contact, primary locale and plan. We use this to operate the app and provide support.
- App configuration you create: your geolocation rules, target countries, redirect destinations, messages and display settings.
- Billing status for paid plans. Payments are handled by Shopify Billing — we never see or store your card details.
Storefront visitor data
- IP address & derived country. When a shopper loads a page on a store that uses GeoMorph, their IP address is read at request time and matched against a local GeoIP database to determine the country. The IP address is used transiently to resolve the country and to apply your rules. We do not sell it, and we do not build advertising profiles.
- Aggregate analytics. We may record non-identifying counts — for example, how many times a rule redirected or blocked a visit — so merchants can see how their rules perform. These counts are not tied to an individual shopper.
- Local storage / cookies. The storefront widget may store a small value in the visitor’s browser (for example, to remember that a banner was dismissed). It is functional only and is not used for tracking.
2. How geolocation works
Country detection is performed server-side using a locally hosted MaxMind GeoLite/GeoIP database. Lookups happen on our own infrastructure; a shopper’s IP address is not forwarded to a third-party geolocation service for this purpose.
3. Why we process this data
- To provide the core functionality you configured (applying geo rules).
- To operate billing, provide support and prevent abuse.
- To produce aggregate analytics for the merchant. Our lawful basis for processing storefront visitor data is our and the merchant’s legitimate interest in delivering region-appropriate storefront experiences.
4. Data sharing
We do not sell personal data. We share data only with:
- Shopify, which hosts your store and provides the app platform and billing.
- Infrastructure providers that host the GeoMorph service, acting as processors under appropriate safeguards.
- Authorities, where required by law.
5. Retention
Shopper IP addresses are processed transiently to resolve country and are not retained as standalone records. Merchant configuration and aggregate analytics are retained while the app is installed. When you uninstall the app, related store data is deleted or anonymized within 30 days, except where we must retain it to meet legal obligations.
6. GDPR, CCPA & data subject requests
We support Shopify’s mandatory privacy webhooks. When Shopify sends a data request, customer-redaction or shop-redaction request, GeoMorph responds by providing or deleting the relevant data we hold. If you are a shopper and wish to exercise your rights (access, correction, deletion, objection), please contact the store you shopped at, or email us at [email protected] and we will assist the merchant in fulfilling the request.
7. Security
Data is transmitted over HTTPS and access to merchant data is restricted to what is needed to operate the service. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.
8. Children
GeoMorph is a business tool intended for merchants and is not directed to children.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notice within the app.