Privacy policy

1. Who we are

Juyan: Help Me Choose is operated by 刘小平, an individual based in China. This policy covers the app and its support and privacy pages. A merchant's store and Shopify also have their own privacy policies.

Merchants decide where to enable the app and which product preferences it may help shoppers choose. We process store information to provide that service for merchants. We are responsible for how we use information for our own account administration, support, and service security.

2. Information we use

• Merchant access and settings. Shop identifiers and domain, installation and permission status, encrypted access credentials, and login-session details supplied by Shopify. Session details can include the authorized staff member's identifier, name, email, language, and role. We store the settings you save, including enabled products, eligible options, appearance, language, and Pro weights or discount settings.
• Product information. Product and variant identifiers, titles, handles, options, and availability information needed to check choices. Merchant-authorized bulk checks also process product exports, review results, selection flags, progress, and error categories. These checks do not require customer lists or orders.
• Choices and usage. The product, eligible variants, required selections, shortlist, generated result, and technical identifiers needed to validate a choice. With analytics permission, usage records can include app opens, completed choices, accepted results, retries, associated product or variant identifiers, timestamps, and random session or event identifiers. These identifiers can link related app events; they are not a guarantee of anonymity. Reports combine activity by shop, product, and day.
• Subscriptions and discounts. Shopify subscription identifiers, verified plan and trial or billing-period dates, and cancellation confirmations or pending requests. Surprise discounts use a generated grant identifier, product and shop references, discount status, and expiry. We do not collect payment-card numbers; Shopify handles subscription approval and billing.
• Support. Information you send, such as an email address, shop domain, message, and relevant screenshots. In-app Feedback records the request, optional contact email, page, app version, and handling status. It does not accept file attachments.
• Operation and security. Request identifiers, route, response status, timing, error category, and short-lived records that prevent replay and excessive requests. Hosting and email providers also process network or message information, which may include IP addresses, request metadata, or email headers.

The chooser does not need a shopper's name, email, phone number, postal address, password, or card details. We do not request customer or order access for this release, collect checkout purchases for attribution, or operate an advertising pixel. Physical-gift uploads are not offered in this release.

3. Why we use this information

We use information to authenticate merchants, save settings, check suitable and available options, produce a choice, issue configured discounts, verify subscriptions, answer support requests, protect the service, and provide consent-based usage reports. We do not sell personal information, use it for targeted advertising, or build profiles across different merchants' stores.

Where a legal basis is required for our own processing, it is to provide our service under our agreement with the merchant, pursue our legitimate interests in security and support, meet applicable legal obligations, or obtain consent where required. Merchants are responsible for the lawful basis and privacy notices for their use of the app in their stores.

A result is an automated suggestion among eligible product preferences. It is not a decision about a person's eligibility, credit, or other legal rights. The shopper keeps control of required specifications and whether to buy.

4. Browser storage and analytics choices

The chooser uses browser session storage for its shortlist, choice validation, and first-use hints, separated by shop and product. This storage supports the current shopping session; it does not create an account or synchronize choices across devices. Some entries have no separate time limit. Closing the page session or clearing site storage removes them, although a browser's session-restore feature may restore them.

Optional analytics events are sent only when Shopify's customer-privacy setting currently permits analytics. If that permission is denied, unavailable, or cannot be read, those events are not sent. Withdrawing permission stops future analytics events; earlier records follow the retention rules below. You can manage consent through the store's privacy controls. Essential choice checks remain separate from optional analytics.

Shopify, the merchant's theme, and other apps may use their own cookies or storage. Their policies apply to those uses. These public support and privacy pages do not set our own cookies, run analytics, or require a login.

5. Providers, sharing, and locations

We use Shopify for store integration and billing, Cloudflare to run and deliver the app, Neon for the app database, and Google's Gmail service for support correspondence. Information is shared as needed for those services. We may also disclose limited information when legally required or needed to investigate a security incident or protect legal rights.

The operator is in China. The app's configured primary database is in the United States, in AWS US East (Ohio). Cloudflare processes requests across its global network. Shopify and Google may process information in other countries under their own arrangements. Information is therefore processed outside the European Economic Area and may be processed outside your country.

Provider information about privacy and international transfers is available from Shopify, Cloudflare, Neon, and Google. Neon's service-specific terms are available in its platform terms. Contact us for information about safeguards applicable to your request. This policy does not promise that data stays in your country.

6. Retention and deletion

We retain information for the purposes described above. Automated cleanup runs in batches; a retention threshold makes a record eligible for deletion and is not a guarantee that every copy disappears at that exact moment.

Choice records and analytics

Short-lived validation and security records expire according to their purpose. Raw usage records and decision sessions become eligible for cleanup after 30 days. Duplicate-prevention identifiers expire after up to 90 days. Daily aggregate reports become eligible for cleanup after 25 months. Analytics records are also removed during uninstall processing; additional plan-related cleanup may apply when analytics access ends.

Product reviews and temporary imports

The latest review and saved product settings remain until replaced or the shop's app data is deleted. Temporary bulk-import data becomes eligible for cleanup when its source expires; stopped or failed imports also become eligible after 24 hours. Completed review results are separate from temporary import data.

Merchant settings, subscriptions, and in-app Feedback

These remain associated with the shop while needed to provide the service and handle requests. They have no separate automatic age-based deletion schedule in the app. Shopify's verified shop-deletion request removes the shop and its associated records from the active app database. You can also email us to request deletion.

Email and incident records

We keep correspondence as needed to resolve the request and handle related support, security, disputes, or legal obligations. The duration depends on whether the matter remains open and whether further retention is required; there is no fixed automatic mailbox-deletion period. Contact us to request deletion of correspondence.

Logs and recovery copies

Cloudflare Workers application logs are retained for up to 7 days on the current paid plan. Provider security records and database recovery history follow their own schedules and can remain after active records are removed. Restricted recovery copies or records needed for an unresolved incident or legal obligation may also remain longer; they are not used to resume ordinary service after a deletion request.

Uninstalling removes stored Shopify login sessions, clears analytics, and marks the app uninstalled. Some configuration and support records remain until a verified shop-deletion request or a separate deletion request is handled. Uninstalling is not an instant deletion of all records held by Shopify or other providers.

7. Your choices and rights

Depending on the law that applies, you may have rights to access, correct, delete, receive a copy of, restrict, or object to the processing of your personal information, withdraw consent, or complain to your local privacy regulator. Send requests to liuyuh084@gmail.com. Include the relevant shop and enough information to identify the request; do not send passwords or payment information.

We may need to verify identity and authority before disclosing or deleting information. Shoppers should also contact the merchant about store and order records. The app's usage records are not indexed by Shopify customer identity, so we may be unable to locate a particular shopper's events from a name or customer identifier alone. This does not remove your right to contact us.

We authenticate Shopify's mandatory privacy requests and handle the app records they concern. Customer-identity requests may have no matching records in this app. Requests concerning correspondence, provider records, or other information are reviewed separately. We respond within the deadlines required by applicable law, subject to permitted identity checks and legal exceptions.

8. Security and policy updates

We use encrypted connections, protected server credentials, verified Shopify requests, access controls, and separation of shop records. No service can guarantee absolute security. Report suspected exposure privately to liuyuh084@gmail.com.

This is a merchant tool and is not directed at children. Please do not send us children's information or sensitive information that is not needed for a support request.

We may update this policy as the service or requirements change. The date at the top identifies this version. We will provide additional notice or obtain consent where required for a material change.