Optizio Policy Documents

Privacy Policy - Discount Kit

Effective Date: 21st July 2025 Last Updated: 31st July 2026

1. Introduction

Optizio Ltd (“we,” “us,” or “our”) operates the Discount Kit Shopify application (“App”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our App.

Company Information:

2. Information We Collect

2.1 Merchant Information

When you install and use our App, we collect:

2.2 Automatically Collected Information

2.3 Information We Do Not Collect

3. How We Use Your Information

3.1 Primary Uses

We use the collected information for:

We rely on different legal bases depending on jurisdiction:

For jurisdictions requiring explicit consent, we:

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We share information with the following trusted third-party services:

Cloudflare

Mantle

Intercom

Sentry

4.2 Shopify Integration

We share data with Shopify only as required for app functionality and in accordance with Shopify’s Partner Program requirements.

4.3 What We Don’t Share

5. Data Security

We implement comprehensive security measures to protect your information:

For detailed information about our security practices, please refer to our Information Security Policy.

6. Data Retention

6.1 Retention Periods

We automatically delete data according to these schedules:

These retention periods comply with data minimization principles and are designed to meet the requirements of all applicable privacy laws.

6.2 Data Deletion

Upon request or at the end of retention periods, we will permanently delete your information from our systems and instruct our third-party service providers to do the same.

6.3 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

7. Your Rights and Choices

7.1 General Rights

You have the right to:

7.2 GDPR Rights (EU/UK Users)

If you are located in the EU or UK, you have additional rights under GDPR:

7.3 US State Privacy Rights

California (CCPA/CPRA): If you are a California resident, you have rights under the California Consumer Privacy Act:

Virginia (VCDPA): If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act:

Colorado (CPA): If you are a Colorado resident, you have rights under the Colorado Privacy Act:

Connecticut (CTDPA): If you are a Connecticut resident, you have rights under the Connecticut Data Privacy Act:

Utah (UCPA): If you are a Utah resident, you have rights under the Utah Consumer Privacy Act:

7.4 US Federal Privacy Laws

COPPA (Children’s Online Privacy Protection Act): See Section 9 for our children’s privacy practices and age-appropriate data handling.

7.5 How to Exercise Your Rights

To exercise any of these rights:

  1. Through Shopify: Use Shopify’s built-in data request mechanisms
  2. Email Us: Contact support@optiz.io
  3. Response Time: We typically respond within 2 business days

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

9. Children’s Privacy

Our App is not intended for use by individuals under the applicable age of digital consent. We do not knowingly collect personal information from children under the relevant age threshold:

If you believe we have inadvertently collected information from a child under the applicable age, please contact us immediately and we will take steps to remove such information.

10. Artificial Intelligence and Automated Processing

10.1 The Discounting Engine Is Not AI

Discount Kit’s discount logic is deterministic, rule-based software. It evaluates the conditions you configure in our admin interface — quantity thresholds, spend goals, product and collection targets, market, location, B2B status, and customer tags — using fixed arithmetic and boolean logic. The same rule applied to the same cart always produces the same result.

We do not operate, host, train, fine-tune or distribute any artificial intelligence model or machine learning system as part of the App. There is no inference, scoring, ranking, prediction, profiling or probabilistic output anywhere in the discounting engine.

For merchants assessing obligations under Regulation (EU) 2024/1689 (the “EU AI Act”): our assessment is that the App is not an AI system within the meaning of Article 3(1), because it is a system based on rules defined solely by natural persons to automatically execute operations (Recital 12). Optizio Ltd is not a provider of an AI system or a general-purpose AI model in respect of the App.

10.2 Shopify Sidekick Integration

Discount Kit integrates with Shopify Sidekick, the AI assistant built into the Shopify admin. Shopify is the provider and operator of Sidekick; we are not. Our role is limited to exposing a set of deterministic tools that Sidekick can call at your staff member’s request — searching your existing discounts, explaining how one is configured, validating a configuration, and setting fields in our discount builder.

10.3 No Model Training on Your Data

We do not use your data, your configuration, your content or your customers’ data to train, fine-tune or evaluate any artificial intelligence model, and we do not supply it to any third party for that purpose.

10.4 No Automated Decision-Making About Individuals

We do not carry out automated decision-making, including profiling, that produces legal effects concerning any individual or similarly significantly affects them, within the meaning of Article 22 of the GDPR. Applying a promotional discount to a cart according to rules you authored is not such a decision.

Discount eligibility is evaluated without us receiving your customer’s identity. Where a rule depends on customer tags, Shopify returns only a true or false result for the specific tags named in your rule; we do not receive customer names, email addresses, contact details, order history or full tag lists. See section 2.3.

10.5 No AI-Generated Content

The App does not generate or alter text, images, audio or video. All merchant-facing and storefront-facing content is either entered by you or drawn from our static, human-written translation files. We therefore supply no synthetic or AI-generated content requiring disclosure or machine-readable marking.

10.6 AI-Assisted Software Development

Our engineers use AI-assisted coding tools when developing the App, as is now standard in software development. These tools operate on our own source code. Merchant data, store configuration and customer data are not provided to them. All AI-assisted code passes through the same review, automated testing and release process as any other change.

10.7 Changes to This Position

If we introduce a feature that changes any of the above, we will update this section before that feature becomes available to you, and material changes are notified as set out in section 11.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

12. Compliance with Local Laws

12.1 Primary Jurisdictions

This Privacy Policy is designed to comply with privacy laws in multiple jurisdictions, including:

12.2 Additional Jurisdictions

If you have questions about how local privacy laws apply to your use of our App, please contact us.

13. Contact Information

For questions about this Privacy Policy or to exercise your privacy rights:

Data Protection Officer: David Spanton
Email: support@optiz.io
Address: Optizio Ltd, 124 City Road, London, EC1V 2NX, United Kingdom

For GDPR-related inquiries in the EU/UK: You also have the right to lodge a complaint with your local data protection authority.

For CCPA-related inquiries in California: You may contact the California Attorney General’s office regarding privacy concerns.

This Privacy Policy is effective as of the 21st July 2025 and governs your use of the Discount Kit Shopify application.