Privacy policy
Last updated October 4, 2026
Mint Ask Buyers is a Shopify app made by Mint Labs ("we", "us"). It adds product questions and answers to a merchant's Shopify store. Shoppers ask questions on product pages; the merchant answers them; and buyers who explicitly said yes to helping can be emailed questions about products they bought and answer them. This policy explains what the app handles about merchants, buyers and shoppers, why, and when it's deleted. For buyer and shopper data we act as a service provider (processor) to the merchant, who is the controller.
The short version
- A buyer is only ever emailed questions after saying yes themselves, on their own order's Thank you or Order status page or from a link in the store's order email. We record when and where they said yes. They get at most 3 question emails a week from a store, and every email has a one-click link to stop.
- When a buyer stops (or the merchant removes them), their email address, name and product list are deleted at once. We keep a keyed one-way hash of the address so they aren't emailed again, and the record of when they said yes and stopped.
- Shoppers who ask a question may leave a first name and, if they want one email when it's answered, an email address. That address is deleted once the answer email is sent (or after 90 days).
- We never store IP addresses. We never sell or share data, use it for advertising, or combine it across stores.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To read product titles and images, read a buyer's order when they say yes, and publish approved Q&A to the store. |
| Store name, store email, contact email, time zone, primary domain and whether the online store is password protected | The store name is the sender name of emails and the contact email their reply-to address; the store email receives test emails and (if switched on) review notices; the domain is used for links back to the store. |
| Settings (moderation rules, blocked words, how many buyers to ask, email texts, colours) | To run the app the way the merchant set it up. |
| Plan status | Read from Shopify to decide which features apply. Plans are chosen on Shopify's plan page and billed by Shopify. |
Information about buyers who said yes
| Information | How it's used | Kept |
|---|---|---|
| The email address on the order they said yes with (read from Shopify once, encrypted with AES-256-GCM) and a keyed one-way hash of it; the first name and last initial they chose to show (optional) | To email them questions about products they bought, and to show their name with their answers (first name and last initial only). The merchant sees the list of buyers who said yes (name, email, when and where) in the app. | Until they stop, the merchant removes them, or 2 years after they last said yes |
| Consent record: when they said yes or stopped, where (Thank you page, Order status page, order email link, unsubscribe link, answer page, merchant), and the order ID they said yes with | Proof that every email was asked for, and to honour stops. | 3 years, or until the person's data is erased |
| The product IDs and date of the order(s) they said yes with | To ask them only about products they bought, and only a while after their order. | Deleted with their email address |
| Which questions they were asked, answer links (only a one-way hash of each link is stored) and whether they answered, skipped or stopped | To never ask the same question twice, keep to the weekly limit, and show the merchant progress. | Links: 60 days; questions asked: 400 days |
| Their answers, with the display name they chose | Shown on the product page once published (with a "Bought this" label), and in the merchant's admin. | While the merchant keeps them, or until the person's data is erased |
Information about shoppers who ask
| Information | How it's used | Kept |
|---|---|---|
| The question and the product, and an optional first name | Shown on the product page if the merchant publishes it, and in the merchant's admin. | Published: while the merchant keeps it. Not published: 180 days |
| An optional email address (encrypted) and its keyed hash | One email when the first answer is published (the merchant can see the address in the app until then). The asker is also never sent their own question as a buyer. | Deleted when that email is sent, or after 90 days |
| A keyed one-way hash of the network address (never the address itself) | Rate limits against automated or repeated questions. | 30 days |
Other records
- Emails waiting or sent: which email, status and time (no address or message content). Kept 30 days after sending.
- Unsubscribes: the keyed hash of the email address, so that person isn't emailed by the app for that store again unless they say yes again.
- Browser storage on the shopper's device: the date of a once-a-day "block is live" signal for the merchant's setup page (local storage). No cookies.
Emails we send
Emails are sent through Cloudflare Email Service from our sending domain (mail.stickermint.com), with the store's name as the sender and the store's contact email as the reply-to address:
- Question emails to buyers who said yes: a shopper's question about a product they bought, with a single-use answer link that expires. At most 3 a week per store, never the same question twice.
- Answer notices: one email to a shopper who asked for it, when their question gets its first published answer.
- Review notices to the merchant (optional): how many questions and answers are waiting for review.
Every email to a buyer or shopper says why they got it and has a one-click stop link.
Customer privacy requests
- Access requests (Shopify's
customers/data_request): the app home shows the request and the merchant downloads everything we hold about that person as a file to send them. - Erasure requests (
customers/redact): we permanently delete the person's buyer record, consent record, product list, emails, the answers they wrote, and their name and email on questions they asked (the question text stays, without a name). - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything we hold for the store. - Buyers can stop question emails at any time with the link in every email or on the answer page.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting, database, message queue and email sending) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest; email addresses are additionally encrypted by the app with a key kept separately from the database. Published questions and answers are stored in the merchant's Shopify store so their theme can show them. Access is limited to Mint Labs staff who need it to provide support. We use no other sub-processors, analytics or trackers. See our security policy.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly; buyers and shoppers can stop emails from any email, contact the store, or email us and we'll pass the request on. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com