Privacy Policy

This policy explains how Koorosh Seyedzadeh (operating as BestAppify) handles personal data when you use bestappify.app, the dashboard, or our API. We are the data controller for that information.

1. What we collect

Information you give us

• Account details — name, email address, password (we store only a hash), and company name if you provide one.
• Billing details — billing name, address and country, plus the last four digits and expiry of your card. Full card numbers go directly to Stripe and never reach our servers.
• Content you submit — the apps you track, competitors you add, notes, support messages, and anything you enter into forms.

Information from accounts you connect

If you connect a Shopify Partner or Google account, we collect only what the feature needs — for example app performance and search metrics — and only for as long as the connection is active. You can disconnect at any time from your dashboard.

Information we collect automatically

• Usage data — pages visited, features used, and actions taken in the dashboard.
• Technical data — IP address, browser and device type, and timestamps, recorded in server logs.

Public App Store data

BestAppify continuously crawls the public Shopify App Store — listings, pricing, ratings, reviews, categories and publicly listed developer names. This is public business information, not private personal data, and it powers our leaderboards and intelligence features. If you are a developer and want your publicly listed details reviewed, contact us at business@bestappify.com.

Paid research and sales calls

We run a panel of Shopify merchants who are paid to take 30-minute calls with app developers. If you join it, we hold what you told us on the application — your store address, role, revenue band, Shopify plan, the kinds of app you use, your timezone and how you would like to be paid — plus a record of the calls you were invited to, took or declined, and what we have paid you.

Calls may be recorded only if you agree, for that specific call. You are asked when you book, the answer is stored against that booking, and declining is a normal answer: the call still happens and you are still paid. Where you agree, the app developer records the call on their own meeting tool and we keep a written transcript — we do not store the audio or video at all. The transcript is readable by the app developer who paid for that call, and by us. We do not sell it, publish it, or share it with anyone else.

We never show app developers your name or email address. They see your store, role, revenue band, plan and app categories, and reach you through us.

2. Why we use it

• To create and run your account, and to provide the features you use.
• To take payment, send invoices, and manage your subscription.
• To send service emails — receipts, security notices, and alerts or digests you have turned on.
• To provide support and answer your questions.
• To keep the Service secure, prevent fraud and abuse, and enforce our Terms.
• To understand how the product is used, so we can improve and fix it.
• To send marketing emails, where you have opted in or where allowed by law. Every marketing email has an unsubscribe link.

We do not sell your personal data, and we do not share it with advertisers.

3. Legal bases (UK/EU users)

Where the GDPR applies, we rely on: contract, to provide the Service you signed up for; legitimate interests, to secure, analyse and improve the Service; consent, for optional marketing and non-essential cookies; and legal obligation, for tax and accounting records.

4. AI processing

Some features send your content — such as an app listing you want audited — to AI providers to generate a result. We use these providers under agreements that prohibit training their models on our customers' data. Don't submit sensitive personal information into AI-powered fields.

5. Google user data

Listing Analytics is optional. If you turn it on, BestAppify asks Google for one read-only permission — https://www.googleapis.com/auth/analytics.readonly — and nothing else. We can never create, change or delete anything in your Google account.

What we read. Only the Google Analytics property you pick, and within it only the events Shopify writes to it about your App Store listing (view_item, add_to_cart, shopify_app_install, shopify_app_ad_click), together with the dates, countries, device types, traffic channels and App Store search terms attached to them.

What we store. Your Google refresh token, encrypted; the ID of the property you selected; and daily totals derived from the events above. We do not store raw event-level exports, and we never receive the identity of the individual merchants who visited your listing — Shopify does not put it in these events.

Limited Use. BestAppify's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is:

• used only to provide and improve the Listing Analytics features you can see in your own dashboard;
• never used for advertising, and never sold;
• never transferred to anyone else, except as needed to run those features, where you tell us to, where the law requires it, or in a merger after we have notified you;
• never read by a human, except with your explicit permission, to investigate abuse or a security incident, or where the law requires it;
• never used to develop, improve or train generalised AI or machine learning models. The AI features described in section 4 are never given Google user data.

Removing it. Disconnect at any time from Dashboard → Analytics. We immediately revoke the token with Google and delete both it and your property selection. The daily totals already synced are kept, so that reconnecting does not lose history Google can no longer supply — email business@bestappify.com if you want those erased as well. Closing your account erases them within 90 days along with everything else.

6. Who we share data with

We share personal data only with service providers who help us run BestAppify, under contracts that limit them to our instructions:

We may also disclose data if required by law, to protect our rights or someone's safety, or as part of a merger or acquisition — in which case we will notify you before your data becomes subject to a different policy.

7. International transfers

Our providers are largely based in the United States, so your data may be processed outside your country. Where required, transfers out of the UK/EU rely on Standard Contractual Clauses or another approved safeguard.

8. Cookies

We use cookies that are strictly necessary to keep you signed in and to keep the site secure. We also use privacy-respecting analytics to understand aggregate usage. We do not use third-party advertising or cross-site tracking cookies. You can block cookies in your browser, though sign-in will stop working.

9. How long we keep it

• Account and content data — while your account is active, then deleted within 90 days of account closure.
• Billing and tax records — up to 7 years, as required by law.
• Server logs — up to 12 months.
• Aggregated, de-identified data — may be kept indefinitely, as it can no longer identify you.

10. Security

Data is encrypted in transit and at rest, access to production systems is restricted and logged, and passwords are hashed. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant regulator as the law requires.

11. Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to or restrict processing, receive it in a portable format, and withdraw consent at any time. Canadian users have equivalent rights under PIPEDA, and California residents under the CCPA — including the right not to be discriminated against for exercising them.

Email business@bestappify.com and we will respond within 30 days. If you are unhappy with our response, you can complain to your local data protection authority, or to the Office of the Privacy Commissioner of Canada.

12. Children

BestAppify is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes

We may update this policy. If a change is material we will email account holders or show a notice in the product before it takes effect. The date at the top always reflects the current version.

14. Contact

For any privacy question or request, email business@bestappify.com.