Privacy Policy - Surge Theme Updater

1. Introduction

ConversionWise Ltd ("we", "us", or "our") operates the Surge Theme Updater service. We are committed to protecting your privacy and being transparent about how we handle your data.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Data We Collect

When you use our Service, we collect the following information:

Data Type	Purpose	Retention
Theme Files	Processing and merging your customizations	Automatically deleted within 15 minutes
License Key	Validating your theme license	Not stored after validation
Store Domain	License verification	Not stored after validation
IP Address	Security, rate limiting, session validation	Session duration only
Session Data	Managing your update workflow	Cleared after download or 15 minutes

Key Point: We do not store your theme files, license keys, or personal information beyond what is necessary to complete your update request. All uploaded files are automatically deleted within 15 minutes.

3. How We Use Your Data

We use the collected data solely for the following purposes:

Theme Processing: To extract, analyze, and merge your customizations into the updated theme
License Validation: To verify your license key is valid for the provided store domain
Security: To implement rate limiting and prevent abuse of the Service
Session Management: To track your update request through completion

We do not use your data for marketing, profiling, advertising, or any purpose other than providing the Service.

4. Data Retention

We follow a strict data minimization approach:

Theme Files: Automatically deleted within 15 minutes of upload, or immediately after download
Session Data: Stored temporarily in our secure session store (Valkey) and cleared after your download completes or after 15 minutes of inactivity
License Information: Not retained after the validation request completes
Server Logs: Retained only for security monitoring and debugging purposes

5. Data Storage and Security

We implement appropriate security measures to protect your data:

Encryption: All data is transmitted over HTTPS/TLS encrypted connections
Secure Storage: Files are stored in isolated, temporary directories
Session Security: Sessions use secure, HTTP-only cookies with strict same-site policies
Access Controls: IP validation ensures only the original requester can download processed files
Automatic Cleanup: Regular cleanup processes ensure no data persists beyond the retention period

6. Third-Party Services

We use the following third-party services:

License Validation API: Your license key and store domain are sent to our license server (base.surgetheme.com) for validation. This is necessary to verify your license.

We do not share your data with any other third parties. We do not use analytics services, advertising networks, or social media tracking on this Service.

7. Your Rights

Because we do not retain your personal data beyond the immediate processing period, most data protection rights are automatically fulfilled:

Right to Deletion: Your data is automatically deleted within 15 minutes
Right to Access: No personal data is stored that could be accessed later
Right to Portability: You receive your updated theme file directly as a download

If you have questions about your data or wish to make a request, please contact us through our help center.

8. Cookies and Sessions

We use only essential cookies necessary for the Service to function:

Session Cookie: A secure, HTTP-only cookie that identifies your session during the update process. This cookie is essential for the Service to work and cannot be disabled.

We do not use:

Tracking cookies
Analytics cookies
Advertising cookies
Third-party cookies

9. International Data Transfers

Our servers are located within secure data centers. If you access the Service from outside the server's location, your data will be transferred internationally as necessary to provide the Service.

10. Children's Privacy

This Service is intended for business use by Shopify merchants. We do not knowingly collect data from children under 16 years of age.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our help center:

help.surgetheme.com

← Back to Theme Updater