Privacy Policy
InstantFeed is a Shopify app and website (InstantFeed.io) operated by Campaign Builder ApS (campaignbuilder.io). This privacy policy describes exactly what data InstantFeed collects, where it is stored, who processes it, and how you can exercise your rights. It is written to match how the service is actually built.
1. Data Controller
The data controller for InstantFeed is:
Campaign Builder ApS
Tueager 1
8200 Aarhus N, Denmark
Email: contact@campaignbuilder.io
2. What Data We Collect
When you install and use the InstantFeed app, we store:
- Contact details you enter during onboarding: company name, contact name, contact email, and your marketing consent choice
- Store connection data: your store's myshopify.com domain, a Shopify API access token (stored encrypted), the permissions granted to the app, install and uninstall timestamps, and your plan tier
- Feed configuration: the feed names, filters, collection selections, field settings, and market, language, and currency choices you make in the app
- Product catalog data: product titles, descriptions, prices, images, and identifiers read from your store through the Shopify API and written into the generated feed files
- Technical logs: short-lived operational logs used to run and troubleshoot the service
Just as important is what we do not collect:
- No customer data. The app requests product-related permissions only. It never reads your customers, orders, or any other personal data about your buyers.
- No payment details. All billing runs through Shopify's own billing system. We never see or store card numbers or billing addresses; we only store which plan your store is on.
Visitors to InstantFeed.io remain anonymous. The website is a static site with no analytics, no tracking scripts, and no cookies.
3. How We Use Your Data
We use the data above to:
- Provide and operate the InstantFeed service, including generating and serving your product feeds
- Keep your feeds in sync with your store
- Provide customer support and send service messages related to your account
- Send the InstantFeed newsletter, only if you opted in (see section 4)
4. Marketing Communications
During onboarding, the app shows a separate, unticked checkbox for the InstantFeed newsletter. We only send you marketing email if you tick that box. Using InstantFeed never signs you up for marketing by itself, and declining has no effect on the service.
The newsletter is sent by InstantFeed in its own name and may include content about partner tools and services relevant to this app. Your contact details are never disclosed to those partners. You can unsubscribe at any time via the link in every email or by writing to contact@campaignbuilder.io.
5. Where Your Data Lives and How It Is Protected
InstantFeed runs entirely on Cloudflare's infrastructure: the app and its API run on Cloudflare Workers, its database runs on Cloudflare D1, and generated feed files are stored in Cloudflare R2. All connections use TLS, Cloudflare encrypts stored data at rest, and we additionally encrypt your Shopify API access token with AES-256-GCM before it is stored.
Generated feed files contain product data only and are served from long, unguessable URLs that can be rotated. Cloudflare operates a global network, so data may be processed outside the EU/EEA; such transfers are covered by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (see section 6).
6. Sharing Your Data and Processors
We do not sell your personal data, and we do not share it with analytics or advertising platforms. We use exactly these processors:
- Shopify - the platform the app runs on. Shopify handles all billing and shares store and product data with the app under the permissions you grant at install.
- Cloudflare, Inc. - hosting and storage for the entire service, as described in section 5.
- Klaviyo, Inc. - our email platform. Your onboarding contact details (company name, contact name, contact email) are stored there, and you are added to the newsletter list only if you gave marketing consent.
Cloudflare and Klaviyo are US companies; transfers to them are safeguarded by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses, under data processing agreements.
7. Cookies
Neither the InstantFeed app nor InstantFeed.io uses cookies. The embedded app authenticates through Shopify session tokens instead of cookies, and the website contains no analytics, advertising pixels, or other tracking. That is also why there is no cookie banner.
8. Data Retention and Deletion
We keep your data for as long as the app is installed on your store. When you uninstall:
- Processing for your store stops immediately.
- Shopify sends us a deletion request shortly after uninstall (typically within 48 hours). We then delete your store's database records, generated feed files, and the contact profile stored in Klaviyo, within 30 days of that request.
The same deletion protocol applies to data requests Shopify relays on behalf of your customers; because the app holds no customer data, there is nothing to report or delete for such requests. Accounting records connected to paid subscriptions are kept by Campaign Builder ApS for five years as required by the Danish Bookkeeping Act; these are invoice-level records, not app data.
9. Your Rights (GDPR)
If you are located in the EU or EEA, you have the following rights regarding your personal data:
- Access: request a copy of the data we hold about you
- Correction: request we correct inaccurate data
- Deletion: request erasure of your data ("right to be forgotten")
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interests
- Withdrawal of consent: withdraw consent for marketing at any time
To exercise any of these rights, contact us at contact@campaignbuilder.io. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.
10. Third-Party Services You Connect
Your feeds are fetched by the channels you hand the feed URL to, such as Google Merchant Center, Meta, or Campaign Builder. Those platforms receive the product data contained in the feed and process it under their own privacy policies. Shopify's own privacy policy applies to the data Shopify processes as the platform the app runs on.
11. Changes to This Policy
We may update this privacy policy from time to time, for example when the service gains new features or processors. The date at the top of this page reflects the most recent revision, and material changes will be announced in the app or by email.
12. Contact
For questions about this privacy policy or how we handle your data:
Campaign Builder ApS
Tueager 1, 8200 Aarhus N, Denmark
Email: contact@campaignbuilder.io
Website: campaignbuilder.io