Privacy policy for Casaneo Pixel
**Last update:** November 19, 2025
Overview
Casaneo Pixel is a Pixel web application for Shopify that helps merchants track conversions and analyze customer behavior on their online stores. This Privacy Policy explains how we collect, use and protect data when you use our application.
Information We Collect
Store information
When you install Casaneo Pixel, we collect :
– Store domain name
– OAuth access tokens (for API authentication)
– Store configuration settings
Information from Shopify
Via Shopify’s APIs, we can access :
– Store configuration and settings
– Web Pixel installation data
– Basic metadata required to run the application
**Important:** We do not access customer lists, order details or product catalogs via Shopify APIs. Our application uses only the minimum permissions required for Web Pixel functionality.
Customer Analysis Data (Pseudonyms)
Our pixel processes the following pseudonymous data in real time for conversion tracking:
– Page views and navigation paths
– Interaction with products (views, add to cart)
– Payment events and finalized purchases
– Session identifiers (anonymous, temporary)
– Browser and device information (user agent, screen resolution)
– Reference URLs and traffic sources
**Important:** We do not intentionally collect or store directly identifiable customer data such as names, e-mail addresses, telephone numbers or payment information. We process pseudonymous analysis data (such as session identifiers and device information) only to the extent necessary to provide the service.
How We Use Information
We use the information collected for :
– Provide conversion tracking and analysis services
– Generate real-time reports for merchants
– Improve the functionality and performance of our service
– Keep Shopify Web Pixel running smoothly
Data Storage and Retention
Access Tokens
– Store access tokens are securely stored in an encrypted database
– Tokens are automatically deleted when you uninstall the application
– Maximum retention time: as long as the application remains installed
Analysis data
– We minimize data retention and do not retain raw event data longer than necessary to provide the service.
– Pseudonymous analysis data is processed in real time to track conversions.
– We do not permanently store directly identifiable customer information (names, e-mails, telephone numbers, payment details).
– Session identifiers are temporary and are not retained after processing.
– Server logs may temporarily contain technical data (IP addresses, user agents) for security and debugging purposes, in accordance with standard web application practices.
Data Sharing
**We do not share any data with third parties.
Specifically:
– We do not sell any data
– We do not share data with advertisers or marketing platforms.
– We do not share data with analysis services
– We do not provide data to any external party
The only exception is compliance with valid legal requests (court orders, subpoenas) when required by law.
Security
We implement industry-standard safety measures:
– Encrypted data transmission (HTTPS/TLS)
– Secure OAuth 2.0 authentication
– Redis encryption at rest
– Regular safety audits
– HMAC signature verification for webhooks
Your rights (RGPD compliance)
As a retailer, you have the right to :
– Access your store data
– Request deletion of your data (by uninstalling the application)
– Receive your data in a portable format
– Filing a complaint with the supervisory authorities
Customer rights
Your customers have rights under the GDPR and other privacy laws. Given our minimum data retention practices:
– Data Access Requests:** We process minimal pseudonymous data in real time and do not keep customer profiles or histories.
– **Data Deletion Requests:** We automatically handle deletion via Shopify’s RGPD webhooks.
– Data portability:** Not applicable as we do not store identifiable customer data.
We automatically process mandatory RGPD webhooks from Shopify :
– `customers/data_request` – Returns confirmation that we do not store personal customer data
– `customers/redact` – Confirms that no customer data needs to be deleted
– `shop/redact` – Deletes all shop-related data (access tokens, configuration)
Data deletion
Automatic deletion
– When you uninstall the application, all associated data (access tokens, settings) is automatically deleted within 48 hours.
– We respond to Shopify’s RGPD webhooks for immediate data deletion requests
Manual deletion
– You can request immediate deletion of data by contacting our support team
– We will process deletion requests within 30 days.
Children’s privacy
Casaneo Pixel is not intended for children under the age of 16. We do not knowingly collect personal information from children.
International Data Transfers
Our services are hosted in secure data centers. Data may be transferred internationally but is always protected by appropriate safeguards in accordance with the GDPR and other applicable laws.
Changes to this Policy
We may update this Privacy Policy from time to time. Important changes will be communicated via :
– E-mail notification to registered merchants
– Notification in the application dashboard
– Updated the “Last updated” date at the top of this policy
Contact Information
For privacy questions, data requests or concerns:
**Casaneo Assistance Team
– E-mail: privacy@casaneo.io
– Support portal: support@casaneo.io
For specific RGPD requests:
– Data Protection Officer: dpo@casaneo.io
Legal Compliance
Casaneo Pixel complies with :
– General Data Protection Regulation (GDPR)
– California Consumer Privacy Act (CCPA)
– Shopify App Store requirements
– E-commerce privacy regulations
Dealer’s responsibilities
As a retailer using Casaneo Pixel :
– You must have appropriate consent mechanisms in place for customer tracking.
– You must include Casaneo Pixel in your store’s privacy policy.
– You are responsible for compliance with local privacy laws
– You must respect customers’ opt-out preferences
Third-party services
Casaneo Pixel operates within :
– Shopify:** Our application runs on Shopify’s infrastructure and respects their privacy requirements.
Shopify has its own privacy policy and data handling practices. We recommend that you consult Shopify’s privacy documentation for complete information on their data practices.
Cookie Policy
Casaneo Pixel Web Pixel can use :
– Session cookies:** For tracking user sessions (temporary, deleted after session)
– Analysis cookies:** For tracking conversions (without personally identifiable information)
Customers can control cookie preferences via their browser settings.
—
Consent** for
By installing and using Casaneo Pixel, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.
If you have any questions or concerns about this Privacy Policy, please contact us at privacy@casaneo.com.
