Privacy policy

Last updated 12 October 2026

Markback is a Shopify app that schedules sales: it lowers product prices when a sale starts and puts the original prices back when it ends. This policy explains what data the app handles when a merchant installs it on their Shopify store, why, how long it is kept, and the choices you have.

Who we are

Markback is developed and operated by Mehmet Uygun ("we", "us"). For the store data the app processes on your behalf, you, the merchant, are the data controller and we act as your data processor. You can reach us at support@markback.mehmetuygun.dev.

Shopify permissions

When you install Markback, you grant it these Shopify permissions, and no others:

Data we collect

Customer and order data

Markback does not request access to, collect or store any personal data about your customers, and it does not access your orders. Shopify's customer data requests and customer data erasure requests are acknowledged, but there is nothing for us to export or delete.

How we use it

We process this data to provide the service you installed (performance of a contract) and, for keeping the app secure and reliable, our legitimate interests. We don't sell your data, use it for advertising or profiling, or share it with anyone except the service providers below.

Service providers

These providers may process data outside your country. Where data leaves the European Economic Area or the United Kingdom, it is protected by the providers' standard contractual clauses or an equivalent safeguard.

Security

All traffic to the app is encrypted with HTTPS. Shopify access tokens are encrypted at rest and expire after about an hour. Webhooks from Shopify are verified before they are processed, and access to the servers is restricted.

How long we keep it

We keep your data while Markback is installed. When you uninstall the app, its access tokens are deleted straight away. The rest is kept for 48 hours, so you can still see which prices to restore, then everything stored for your store is deleted when Shopify sends its shop data deletion request. Sessions expire after two hours of inactivity.

Your rights

Depending on where you live, including under the GDPR, UK GDPR and California's CCPA, you may have the right to access the data we hold about your store, correct it, delete it, receive a copy of it, or object to how we process it. Email us to make a request and we'll respond within 30 days. Uninstalling the app also deletes your data as described above. You can also complain to your local data protection authority.

Children

Markback is a tool for businesses and is not directed at children.

Changes

If we change this policy, we'll update the date at the top of this page, and email installed stores about significant changes.

Contact

Questions about privacy: support@markback.mehmetuygun.dev