1. Who we are
Ye Pixel is a first-party conversion analytics application provided by YEEDOOR for merchants that use Shopify. This policy explains how we handle information when a merchant installs and uses Ye Pixel, and when a shopper interacts with a merchant's storefront.
In this policy, “we”, “us”, and “our” refer to YEEDOOR. YEEDOOR is the trade name of Hangzhou Yidao Chuhai Digital Technology Co., Ltd. “Merchant” means the business that installs Ye Pixel. “Shopper” means a person who visits or buys from a merchant's store.
2. Coverage
This policy applies to Ye Pixel, including the application in the Shopify admin, the storefront tracking features, the merchant reporting experience, and the connections a merchant chooses to enable.
It does not apply to Shopify's own processing, or to third-party services a merchant connects to Ye Pixel. Those services handle information under their own terms and privacy policies.
3. Information we process
3.1 Merchant account and support information
When a merchant installs Ye Pixel or contacts us, we process information needed to operate the service and respond to the merchant, such as the store name, store domain, account identifiers, contact details, settings chosen in the app, and support messages.
3.2 Storefront activity
With the merchant's settings and the shopper's consent choices, Ye Pixel may receive storefront events such as page views, product views, searches, add-to-cart, checkout, and purchase. These events may include the event name, time, page path without query strings, product or variant identifiers, order value, currency, a pseudonymous session or visitor identifier, and the consent status that applied at the time.
We design these events to avoid raw URLs, passwords, payment card details, and unnecessary personal information.
3.3 Order verification
Ye Pixel reads the merchant's own Shopify orders to confirm that a purchase occurred and to connect the storefront journey with the verified order. Order records may include the order identifier, financial status, order time, amounts, currency, line items, and sales channel.
We do not treat a browser event alone as proof of payment. A purchase is counted only after it is matched to a verified order.
3.4 Customer matching details
Where a merchant has obtained the applicable Shopify approvals and the shopper has given the applicable consent, Ye Pixel may process a shopper's name and email address to match a storefront journey to a verified order, deduplicate events, and support the merchant's authorized measurement.
Customer email addresses and names are stored in encrypted form (AES-256-GCM) and are shown only to authorized merchant users. Email match keys are irreversibly hashed before use. Raw values are not written to logs or included in analytics event payloads. We do not use a shopper's name as an advertising match key. We do not request customer telephone numbers or physical addresses.
3.5 Technical and security information
We process limited technical information needed to operate, secure, and support the service, such as request time, response status, service health, and security events. Our application records are designed not to contain customer contact details.
4. How we use information
We use information to:
- provide, operate, and maintain Ye Pixel;
- attribute verified orders to the storefront journeys that produced them;
- remove duplicate events and improve measurement quality;
- prepare merchant-facing reports and conversion insights;
- send conversion information to destinations the merchant has connected and authorized;
- respect consent and opt-out choices;
- secure the service, prevent misuse, and investigate incidents;
- provide support and respond to merchant requests;
- comply with legal obligations and enforce our agreements.
We do not sell personal information. We do not use customer contact details for our own advertising. We do not use them to train models for other merchants.
5. Legal bases
Where data protection law requires a legal basis, we rely on:
- Contract — to provide Ye Pixel to the merchant.
- Consent — for analytics, marketing, and data-sharing choices that require consent, as recorded through Shopify's customer privacy controls.
- Legitimate interests — to secure the service, prevent fraud, improve reliability, and provide merchant reporting, balanced against individual rights.
- Legal obligation — to keep records or respond to lawful requests.
A shopper may withdraw consent through the merchant's storefront privacy controls. A merchant may disconnect a destination or uninstall Ye Pixel at any time.
6. How we share information
We share information only as needed to provide Ye Pixel:
- Service providers. We use hosting, data storage, monitoring, email, and support providers that process information on our instructions under confidentiality and security terms.
- Merchant-connected destinations. When a merchant connects a destination such as Google Analytics 4, Meta, or Google Ads, and the applicable consent allows it, we may send conversion information to that destination. The merchant controls which destinations are connected.
- Professional advisers and authorities. We may disclose information when required by law, legal process, or a valid regulatory request, or to protect rights, safety, and security.
- Business transfers. If our business is reorganized, merged, or sold, information may be transferred as part of that transaction, subject to this policy and applicable law.
We do not sell personal information.
7. International transfers
We provide Ye Pixel from facilities located in Singapore, and we may use service providers in other countries. Where required, we use contractual safeguards and standard contractual clauses to protect information transferred across borders.
8. Retention
We keep information only for as long as needed for the purposes described in this policy, unless a longer period is required by law.
| Information | Retention |
|---|---|
| Storefront events | Up to 30 days |
| Verified order and attribution records | Up to 24 months |
| Delivery and destination records | Up to 90 days after their final status |
| Privacy request records | Up to 24 months |
| Export files prepared for a merchant | Up to 7 days |
| Security and access records | Up to 12 months |
| Encrypted backup copies | Up to 35 days |
When a valid customer deletion request is processed, we delete or irreversibly de-identify the associated event, order, delivery, and matching records. Encrypted backup copies (AES-256-GCM) expire on their normal cycle and are not used for analytics.
9. Security
We use technical and organizational measures designed to protect information, including:
- encrypted connections between browsers, our service, and connected destinations;
- access controls and least-privilege permissions for administrative access;
- protection of stored credentials and matching keys through encryption or irreversible hashing;
- security records of administrative and security-relevant activity;
- vendor safeguards and confidentiality commitments;
- encrypted backups (AES-256-GCM) and recovery arrangements designed to protect service availability and data integrity;
- an incident response process for detecting, containing, investigating, and remediating security incidents.
If we confirm a personal data breach affecting a merchant's information, we will notify the affected merchant without undue delay and, where required, no later than 72 hours after confirmation. We will cooperate with required regulatory notifications.
No method of transmission or storage is completely secure. We continually review and improve our safeguards.
10. Your choices and rights
Merchants may access, correct, export, or delete information associated with their account, disconnect a destination, or uninstall Ye Pixel. Uninstalling stops future application access.
Shoppers may contact the merchant or us to request access, correction, deletion, restriction, objection, or portability, or to withdraw consent. We will respond within the time required by applicable law. We may need to verify a request before acting on it.
Where a merchant is the controller of shopper information, we support the merchant's response to the request. Shoppers may also use the privacy controls provided on the merchant's storefront.
We do not sell personal information. Where applicable law provides a right to opt out of sale or sharing, that right is available through the merchant's privacy controls or by contacting us.
11. Cookies and storefront consent
Ye Pixel respects the merchant's Shopify customer privacy settings for analytics, marketing, and sale of data. When a shopper withdraws consent, Ye Pixel stops sending new information to the affected destinations. The merchant is responsible for presenting accurate privacy notices and consent choices on its storefront.
12. Children
Ye Pixel is a business service and is not directed to children. We do not knowingly collect personal information from children. If you believe a child's information has been provided to us, contact us and we will take appropriate action.
13. Changes to this policy
We may update this policy to reflect changes in the service, legal requirements, or our practices. The effective date at the top of this page identifies the current version. Material changes will be communicated through the application or our website.
14. Contact
Privacy questions and requests can be sent to aiken@yeedoor.com with the subject “Privacy request — Ye Pixel”.
YEEDOOR
Hangzhou Yidao Chuhai Digital Technology Co., Ltd.
Website: www.yeedoor.com
Support: www.yeedoor.com/support