Privacy Policy — Gift Card Balance by Torhen

Last updated: 2026-10-10 · Provided by TORHEN SPA (Chile).

Gift Card Balance by Torhen ("the app") lets a Shopify merchant's customers check the balance of the merchant's gift cards on the online store, and lets the merchant's staff check it on Shopify POS. This policy explains what data the app accesses, how it is used, and how it is protected.

Data we access

• Store identity: your .myshopify.com domain, store name, primary domain and an OAuth access token, used to authenticate API calls.
• Gift cards (scope read_gift_cards, read-only): balance, initial value, currency, expiry date, status and last 4 characters, read on demand to answer a balance check or build the liability report. The app never creates, changes or deactivates gift cards.
• Gift card codes typed by shoppers or staff: used once to ask Shopify for that card's balance and then discarded. Codes are never stored or logged.
• Anti-fraud counters: a salted one-way hash derived from the visitor's IP address and a count of failed attempts, kept for at most 24 hours to block code guessing. IP addresses themselves are never stored.
• Usage counters and settings: monthly number of checks (for plan limits) and the balance page texts you set.

The app does not access customer profiles, orders or payment information, and it stores no personal data of your customers.

How we use it

Solely to provide the app's features. We do not sell, rent or share your data with third parties, and we do not use it for advertising or AI training.

Where it is stored

Data is stored in Cloudflare D1 (a managed SQL database) on Cloudflare's network, accessed only by the app's Cloudflare Worker. Access tokens are used only for Shopify Admin API calls on your behalf.

Retention & deletion

Your data is retained while the app is installed. When you uninstall, we honor Shopify's app/uninstalled and shop/redact webhooks and delete your store's data. You may also request deletion at any time via the contact below.

Your rights

You may request access to, correction of, or deletion of your data. We comply with Shopify's mandatory GDPR/CCPA webhooks (customers/redact, customers/data_request, shop/redact); since no customer personal data is stored, customer requests have nothing to return or delete.

Contact

Questions or data requests: torhencompany@gmail.com · TORHEN SPA, Chile.