Privacy policy
We collect very little, and this page says exactly what and why.
Last updated 17 October 2026.
The short version
We collect very little. We use Google Analytics to count visits — which pages are read, where visitors come from, what they do on the page — so we know what on this site is useful. Outside Europe it sets a cookie so a returning visitor is counted once. There is no advertising pixel, no ad tracking and no session recording. If you email us or book a demo, we keep what you send so we can reply to you — and nothing else.
If you install the Bantri app on your Shopify store, we hold what we need to run your mobile app, and your customers’ data stays yours. The Bantri Shopify app section below lists all of it.
What this website loads
Three things reach outside our own server, and each one sees your IP address because that is how the web works:
- Google Fonts — our two typefaces load from fonts.googleapis.com and fonts.gstatic.com.
- Cal.com — only if you open the demo booking. Nothing from Cal.com loads until you press a button that opens it.
- Google Analytics — loads from googletagmanager.com on every page and tells Google which page you opened, the site that sent you, your rough location (country and city), your device and browser, how far you scroll, links you follow off the site, and when you open the demo booking, send the demo or contact form, or complete a booking. Google Signals and every advertising setting are switched off, so none of it is used for ad targeting or personalisation. Google Analytics does not store your IP address. Visit-level data is deleted after two months; what remains is totals.
- Nothing else. No advertising pixel, no session recording, no A/B testing.
Google Analytics sets two cookies, _ga and _ga_<id>, so that a second visit is counted as a returning visitor rather than a new one. They expire two years after your last visit. If you are in the European Economic Area, the UK or Switzerland, these cookies are not set: Google still receives the page and event details listed above, but without a cookie, so it cannot link one visit to the next. You can block Google Analytics everywhere with any content blocker, or with Google's own opt-out add-on; the site works the same without it.
Cal.com may set its own cookies once you open a booking; their privacy policy governs that.
What we collect, and why
| When | What | Why |
|---|---|---|
| You visit this website | Pages viewed, referring site, country and city, device and browser, scrolling and links followed, demo and contact actions — through Google Analytics, as described above | To see which pages help and which do not |
| You email us | Your address and whatever you write | To reply |
| You use the contact form | Name, email, optional store domain, your message | To reply |
| You book a demo | Whatever Cal.com collects — usually name, email, timezone — which then reaches our own systems so the meeting is on our calendar | To hold the meeting |
| You become a customer | Company details, billing details, the Shopify credentials needed to run your app | To deliver the service |
We do not buy contact data about you, and we do not sell, rent or share yours with anyone for their own marketing.
If you become a customer
Running your app means holding credentials for your Shopify store and data about your customers. Two things are worth stating plainly:
- We never see card numbers. Checkout runs on Shopify’s own checkout sheet. Payment data goes from your customer to Shopify and their payment provider, not through us.
- Your customers’ data is yours. We process it to run the app you asked us to run. We do not use it for our own purposes, and we do not use it to build anything for another merchant.
Each customer gets a separate database. Credentials are encrypted at rest, and our systems refuse to start rather than run with a credential missing.
The Bantri Shopify app
This section covers the Bantri app you install from your Shopify Admin, and the iOS and Android app we build and publish for your store. Two roles are worth separating. For your own details as a merchant, we decide what is collected and why. For your customers’ data, you are in charge and we act on your instructions: we process it only to run the app you asked us to run.
What the Bantri app stores about your store
| What | Why |
|---|---|
| Your shop’s name, contact email, myshopify.com domain, currency and languages, read from Shopify when you install | To set up your app in the right currency and languages, and to reach you about your account |
| Your app configuration — branding, layout, navigation, translations, content and settings you make in the dashboard and the App Designer | This is your app; the mobile app reads it to know what to show |
| A Storefront access token for your store | Lets your mobile app read the products and collections you publish to the Bantri sales channel, and start a Shopify checkout. It cannot read your orders or change your store. |
| Push notification device tokens, and the notifications you write and schedule | To deliver your push notifications to the phones that have your app installed and allowed them |
| Features you switch on, linked to the shopper’s Shopify customer ID where they need one: loyalty points and tier, product reviews, survey answers, game plays, back-in-stock requests, and AI assistant conversations (kept 30 days) | To run those features for your shoppers. Removed for a shopper on Shopify’s customers/redact request, and for your whole store on uninstall |
| App usage counts per day — opens, product views, adds to cart, checkouts, orders and their value, searches — counted by a random install id, with no names or emails | The Analytics page in your dashboard |
| Build requests — the app name, icons, store-listing text and contact details you send when you ask us to build or update your app | To build your app and submit it to the App Store and Google Play |
Your orders, payments, customer accounts and customer list stay in Shopify. The Bantri app does not copy your order history or customer list into our database. When loyalty is on, we read each paid order (customer ID and amount) to award points, and keep only the points.
What your mobile app does with your customers’ data
- Browsing. Products, prices and stock come straight from Shopify. The basket is kept on the shopper’s phone until they check out.
- Signing in. Shoppers sign in with their existing customer account for your store, through Shopify’s Customer Account API. Shopify checks who they are; their name, addresses and orders are shown from Shopify. We do not hold their password.
- Checkout. Checkout runs on Shopify’s own checkout. Card details, payment and the order itself go to Shopify and your payment provider. We never see card numbers.
- Push notifications. If a shopper allows notifications, their phone gives the app a device token, which we store so your notifications can reach it. Turning notifications off in the phone’s settings stops them.
- App usage and crashes. The mobile app reports how it is used — screens opened, products viewed, items added to the basket, checkouts started — and crash reports, through Google Firebase, so you and we can see what works and fix what breaks.
Who else processes it
| Provider | What they do for us |
|---|---|
| Shopify | Your store platform. Holds your products, customer accounts, orders and payments, and runs checkout. |
| Google Firebase | Cloud Messaging delivers push notifications (to iPhones through Apple’s push service). Analytics and Crashlytics receive the app-usage events and crash reports described above. |
| DigitalOcean | Hosts our servers and the database that holds the data listed in this section, in Frankfurt, Germany. |
| Anthropic | Only if you turn on the AI assistant: answers shoppers’ questions. It receives the question and matching products from your catalogue, never payment details. |
| Klaviyo | Only if you connect it: the app sends shopping events to your own Klaviyo account, under your Klaviyo terms. |
| Resend | Sends service emails from us to you, the merchant. Never used to email your customers. |
| Apple and Google | Distribute your app through the App Store and Google Play, under your own developer accounts. |
If we add a provider that receives data from the Bantri app, we will list it here before it does.
When you uninstall
When you uninstall the Bantri app, Shopify stops billing for it, and 48 hours later sends us a request to erase your store’s data (shop/redact). We delete everything the Bantri app holds about your store within 30 days of that request — configuration, Storefront token, device tokens, push history, loyalty points, reviews, survey answers, game plays, back-in-stock requests, AI assistant conversations, analytics counts and build requests. What we must keep for tax and accounting, such as records of what you were billed, is kept only for as long as the law requires.
Your app listing stays in your own Apple and Google developer accounts. If you want your app to keep running or to move elsewhere, email us before you uninstall.
Requests about one of your customers
Shopify passes your customers’ privacy requests to us automatically, and we act on each one:
- Data request (customers/data_request) — we send you what we hold about that customer, so you can answer them, within 30 days.
- Erasure (customers/redact) — we delete what we hold that is linked to that customer, such as their device tokens, within 30 days. Shopify sends this when a customer’s data is to be erased from your store.
A shopper who contacts us directly will be pointed to you, because you decide what happens to your customers’ data; we then carry out what you ask.
Questions about the app
Email hello@bantri.co. For help with the app itself, see support.
How long we keep things
Analytics: visit-level data for two months, then totals only. Enquiries that do not become customers: up to two years, then deleted. Customer data: for as long as you are a customer, and for a reasonable period afterwards for accounting and legal obligations. Data held by the Bantri Shopify app follows the shorter rule in its own section: deleted within 30 days of Shopify telling us you have uninstalled. Ask us to delete something earlier and we will, unless we are legally required to keep it.
Your rights
Wherever you are, you can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email hello@bantri.co and we will answer within 30 days. We will not make you jump through a process to exercise a right.
If you are in the EU or the UK, that is your GDPR rights; in California, your CCPA rights; in Saudi Arabia, your PDPL rights. Everyone gets the same rights, wherever they live, rather than only those whose law requires it.
Changes
If we change this materially we will update the date above, and tell customers directly rather than relying on you to re-read the page.
Contact
hello@bantri.co — for anything on this page, including a complaint.