LitGiftCart

Privacy Policy

Effective date: August 21, 2026

1. Introduction

Welcome to LitPDF Apps. LitPDF Apps ("us", "we", or "our") operates LitGiftCart (hereinafter referred to as "Service"), a Shopify application that helps merchants automatically add and remove free gift products in the cart based on promotion rules they configure.

This Privacy Policy governs your use of LitGiftCart (including app.litgiftcart.com and related app surfaces) and explains how we collect, safeguard, and disclose information that results from your use of our Service. We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

Our Terms of Use ("Terms") govern all use of our Service and together with this Privacy Policy constitute your agreement with us ("agreement").

2. Definitions

SERVICE — The LitGiftCart Shopify application and related websites operated by LitPDF Apps.

MERCHANT / USER — The Shopify store owner, staff member, or other individual who installs or uses the Service.

SHOPPER — An end customer browsing or checking out on a Merchant's Shopify storefront.

PERSONAL DATA — Data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).

USAGE DATA — Data collected automatically either generated by the use of Service or from Service infrastructure itself (for example, the duration of a page visit or diagnostic logs).

COOKIES — Small files stored on your device (computer or mobile device).

DATA CONTROLLER — A natural or legal person who determines the purposes for which and the manner in which any personal data are processed. For the purpose of this Privacy Policy, we are a Data Controller of Merchant data we process for our own purposes. Where we process data solely on behalf of a Merchant in connection with their store, we may act as a Data Processor.

DATA PROCESSORS (OR SERVICE PROVIDERS) — Any natural or legal person who processes the data on behalf of the Data Controller.

DATA SUBJECT — Any living individual who is the subject of Personal Data.

3. Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you. LitGiftCart is designed primarily for Merchants. Shopper cart activity on a Merchant's storefront is processed to apply the Merchant's configured gift rules and is not used by us for unrelated marketing to Shoppers.

4. Types of Data Collected

Personal Data (Merchants)

When you install or use our Service through Shopify, we may receive or process personally identifiable information that can be used to contact or identify you. This may include, but is not limited to:

  • Email address (including Shopify account email)
  • First name and last name
  • Shopify shop domain and shop identifiers
  • Account / staff role information provided by Shopify (e.g. account owner status)
  • Billing and plan information related to your LitGiftCart subscription (processed via Shopify Billing)
  • Cookies and Usage Data

We may use your Personal Data to contact you with product updates, support messages, newsletters, marketing, or promotional materials. You may opt out of marketing communications by following the unsubscribe link or contacting us.

Promotion and store configuration data

To operate LitGiftCart we store Merchant-configured promotion data, such as promotion names, trigger products/variants, gift products/variants, quantities, schedule windows, optional conditions (e.g. tags, collections, logged-in status), and related settings. This data describes the Merchant's catalog and rules, not Shopper identity profiles maintained by us.

Storefront / cart-related data

When LitGiftCart runs on a Merchant's storefront (theme embed, app proxy, and/or Shopify Discount Function), we may process cart and session context needed to evaluate rules — for example cart line contents, product/variant identifiers, quantities, and whether a customer is logged in. We do not sell Shopper Personal Data. Merchants remain responsible for their own privacy notices to Shoppers and for compliance with applicable law for their storefronts.

Usage Data

We may also collect information that your browser or our servers generate when you visit or use the Service ("Usage Data"), including IP address, browser type, pages visited, time and date of visit, and diagnostic data.

Product analytics (Mixpanel)

We use Mixpanel to understand how merchants use LitGiftCart (for example, which app pages are viewed and promotion setup actions). In the embedded admin app we identify your shop by its .myshopify.com domain — not individual shopper identities. Mixpanel may collect device and usage data such as browser type, page URLs, and interaction events. We enable session replay in Mixpanel for a subset of admin sessions to diagnose UX issues; replay data is used for product improvement, not for marketing to your customers.

We do not use Mixpanel on your storefront theme embed to track shoppers for advertising. Storefront cart evaluation runs locally in the buyer's browser to apply your promotion rules.

Tracking Cookies Data

We use cookies and similar tracking technologies to operate and improve the Service. Examples of Cookies we may use:

  • Session Cookies: to operate our Service and authenticate Merchant sessions.
  • Preference Cookies: to remember preferences and settings.
  • Security Cookies: for security purposes.
  • Analytics Cookies: to understand how the Service is used and improve it.

You can instruct your browser to refuse cookies; however, some parts of the Service may not function properly without them.

5. Use of Data

LitGiftCart uses the collected data for various purposes:

  • To provide and maintain our Service
  • To authenticate Merchants via Shopify and manage app installation
  • To evaluate promotion rules and apply automatic gift add/remove and discount behavior
  • To notify you about changes to our Service
  • To provide customer support
  • To gather analysis or valuable information so that we can improve our Service
  • To monitor the usage of our Service
  • To detect, prevent, and address technical issues
  • To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including billing
  • To provide you with notices about your account and/or subscription, including expiration and renewal notices
  • To provide you with news, special offers, and general information about other goods and services we offer
  • In any other way we may describe when you provide the information, or for any other purpose with your consent

6. Retention of Data

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Usage Data is generally retained for a shorter period (typically up to 3 months), except when needed for security, Service improvement, or legal obligations. When you uninstall LitGiftCart, we process Shopify uninstall webhooks and delete or de-identify Merchant data we no longer need, subject to legal retention requirements and residual backup copies that are deleted on a rolling schedule.

7. Transfer of Data

Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. LitGiftCart will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

8. Disclosure of Data

We may disclose personal information that we collect, or you provide:

  • Business Transaction. If we or our subsidiaries are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred.
  • Service Providers. To contractors and service providers who help us operate the Service (for example hosting, analytics, error monitoring, or email).
  • Shopify. The Service runs on the Shopify platform; Shopify processes Merchant and Shopper data under Shopify's own terms and privacy policy.
  • To our subsidiaries and affiliates; to fulfill the purpose for which you provide it; with your consent; or if we believe disclosure is necessary to protect the rights, property, or safety of LitPDF Apps, our customers, or others.
  • When required by law, regulation, legal process, or governmental request.

9. Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

10. Disclaimer of Warranties; Limitation of Liability

The Service is provided on an "as is" and "as available" basis. To the fullest extent permitted by applicable law, LitPDF Apps and its owners, officers, employees, and agents disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

Without limiting the foregoing, we do not warrant that: (a) gift products will always be added, removed, or discounted correctly; (b) promotions will increase sales, conversions, or revenue; (c) the Service will be uninterrupted, timely, secure, or error-free; (d) inventory, pricing, tax, or shipping outcomes on your store will be accurate; or (e) defects will be corrected.

Merchants are solely responsible for configuring promotions, selecting gift products, monitoring inventory, complying with advertising and consumer-protection laws, and verifying that cart and checkout behavior matches their intent before and after going live.

To the fullest extent permitted by law, in no event shall LitPDF Apps, LitGiftCart, or their affiliates be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages, or any loss of profits, revenue, data, goodwill, business opportunity, or other intangible losses, arising out of or related to your use of (or inability to use) the Service — including without limitation incorrect free gifts, failed discounts, overselling, theme/app conflicts, Shopify platform changes, or third-party outages — whether based in contract, tort, strict liability, or otherwise, even if we have been advised of the possibility of such damages.

Some jurisdictions do not allow certain limitations; in those cases, our liability is limited to the maximum extent permitted by law.

11. Your Data Protection Rights Under GDPR

If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights covered by GDPR. If you wish to be informed what Personal Data we hold about you or want it removed from our systems, please email us at [email protected].

In certain circumstances, you have the following rights:

  • The right to access, update, or delete the information we have on you
  • The right of rectification — to have your information rectified if inaccurate or incomplete
  • The right to object to our processing of your Personal Data
  • The right of restriction — to request that we restrict the processing of your personal information
  • The right to data portability — to be provided with a copy of your Personal Data in a structured, machine-readable format
  • The right to withdraw consent at any time where we rely on your consent to process your personal information

12. Your Data Protection Rights Under CalOPPA

According to CalOPPA we agree to the following:

  • Users can visit our marketing site anonymously
  • Our Privacy Policy link includes the word "Privacy" and can easily be found on the home page
  • Users will be notified of any privacy policy changes on our Privacy Policy Page
  • Users are able to change their personal information by emailing us at [email protected]

Do Not Track Signals: We honor Do Not Track signals and do not track, plant cookies, or use advertising when a Do Not Track browser mechanism is in place, to the extent reasonably practicable for operating authenticated Merchant sessions required by Shopify.

13. Your Data Protection Rights Under CCPA

If you are a California resident, you are entitled to learn what data we collect about you, ask to delete your data, and not to sell (share) it. To exercise your data protection rights, you can make certain requests and ask us:

  • What personal information we have about you — including categories, sources, business purposes, third parties, and specific pieces of information collected
  • To delete your personal information — we will delete the personal information we hold about you as of the date of your request, subject to legal exceptions
  • To stop selling your personal information — we don't sell or rent your personal information to any third parties for any purpose

To exercise your California data protection rights, please send your request(s) by email: [email protected].

14. Service Providers

We may employ third party companies and individuals to facilitate our Service, provide Service on our behalf, perform Service-related services, or assist us in analysing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Key platform providers include Shopify Inc. (app distribution, authentication, billing, and storefront commerce APIs) and Mixpanel (product analytics for the merchant admin app, as described above). Your use of Shopify is also governed by Shopify's terms and privacy policy.

15. Analytics

We use Mixpanel to monitor and improve the merchant admin experience. We do not sell merchant or shopper personal data. We do not run remarketing or advertising pixels in the storefront cart embed.

16. Links to Other Sites

Our Service may contain links to other sites that are not operated by us (including Shopify Admin and the Shopify App Store). If you click a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third party sites or services.

17. Children's Privacy

Our Services are not intended for use by children under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If you become aware that a child has provided us with Personal Data, please contact us.

18. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and may let you know via email and/or a prominent notice on our Service prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

19. Contact Us

If you have any questions about this Privacy Policy, please contact us by email: [email protected].