Back to app
Home / PREFIT PRO PRIVACY POLICY

PREFIT PRO PRIVACY POLICY

Last updated: July 01, 2026

1. Introduction

PreFit Pro ("PreFit Pro", "the App", "we", "us", "our") is a Shopify application operated by PreTech Park, located in Dhaka, Bangladesh. This Privacy Policy explains how we collect, use, disclose, and protect information when a merchant installs or uses the App, and when a shopper interacts with the App's features on a merchant's storefront.

By installing or using the App, you agree to this Privacy Policy. If you do not agree, please do not install or use the App.

Contact: support@pretechpark.com
Website: https://pretechpark.com

2. Our Role (Data Controller / Processor)

  • For personal data we process on behalf of a merchant (for example, shopper vehicle selections and order-related data), the merchant is the data "controller" and we act as a data "processor" / service provider, processing such data only on the merchant's documented instructions.
  • For the limited data we process to operate the App and manage our relationship with the merchant (for example, the merchant's shop domain and contact details), we act as a data controller.

3. Information We Collect

a) Merchant and store data

  • Shop domain, store metadata, and Shopify-issued OAuth access tokens, required to operate the App.
  • Product data you map to vehicles (product IDs, titles, handles, variants, tags) and the app configuration/settings you create.
  • Subscription and billing status via the Shopify Billing API. We never receive or store your payment card details.

b) Shopper (storefront) data

  • Vehicle selections (year, make, model, submodel, engine, or wheel/tire specs) associated with a randomly generated first-party browser token, and — only when the shopper is logged in — with their Shopify customer ID, to provide the "My Garage" feature and fitment checks.
  • Anonymous usage events (such as searches performed, fitment checks, and add-to-cart interactions) used to produce aggregate analytics for the merchant.
  • Order-related data: where the relevant features are enabled, the App may read order and associated customer information to attach fitment/vehicle notes to orders and to attribute fitment-assisted revenue in analytics (see Section 5).

c) Technical data

  • Standard server and request logs (such as IP address, timestamps, and user-agent) generated when the App's endpoints are called, used for security, debugging, and abuse prevention.

We do NOT collect shopper names, email addresses, physical addresses, or payment data for the App's core storefront widgets. We do NOT sell personal data, use it for advertising, or use it to train artificial-intelligence or machine-learning models.

4. How We Use Information and Legal Bases (GDPR / UK GDPR)

We process personal data to:

  • provide and operate the App's features (performance of a contract; legitimate interests);
  • maintain, secure, and improve the App and prevent abuse (legitimate interests);
  • generate aggregate analytics for merchants (legitimate interests, and on the merchant's instructions);
  • comply with legal obligations (legal obligation).

Where we act as a processor, we process personal data only on the documented instructions of the merchant (the controller).

5. Shopify Protected Customer Data

Certain optional features (for example, automatic order notes and fitment-assisted revenue attribution) require access to order and customer information that Shopify classifies as Protected Customer Data. When such features are enabled, we:

  • access only the minimum fields required for the feature;
  • use the data solely to provide the feature to the merchant;
  • do not use it for advertising, resale, or model training; and
  • apply retention and deletion consistent with this policy and Shopify's requirements.

Merchants may disable these features at any time to stop this processing.

6. Cookies and Local Storage

The App's storefront features use first-party browser storage (localStorage and a first-party token) to remember a shopper's selected vehicle(s) and garage. These are strictly functional and are not used for cross-site tracking or advertising. Shoppers can clear this data through their browser at any time.

7. Sharing and Sub-Processors

We do not sell personal data. We share data only with service providers who help us operate the App, under appropriate contractual safeguards:

  • Shopify Inc. — platform, authentication, billing, and data exchange.
  • Fly.io — application hosting and database infrastructure.

We may also disclose information where required by law, regulation, legal process, or to protect the rights, property, or safety of our users, the public, or us.

8. International Data Transfers

We operate from Bangladesh and use infrastructure that may process data in other countries. Where personal data of individuals in the EEA or the United Kingdom is transferred internationally, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) where required by law.

9. Data Retention and Deletion

  • We retain merchant and mapping data for as long as the App is installed.
  • On uninstall, shop data (vehicles, fitments, garages, analytics, and settings) is deleted when we receive Shopify's "app/uninstalled" webhook, and again on the "shop/redact" webhook (approximately 48 hours after uninstall).
  • We honor Shopify's mandatory "customers/data_request" and "customers/redact" webhooks to provide or erase customer data.
  • Anonymous shopper garage data expires with the shopper's browser storage.

10. Security

  • Data in transit is encrypted using TLS/HTTPS.
  • OAuth access tokens and secrets are stored server-side only and are never exposed to the storefront or client.
  • Storefront App Proxy requests are verified using HMAC signatures.
  • Access to production systems is restricted to authorized personnel.

No method of transmission or storage is completely secure, but we take commercially reasonable measures to protect personal data.

11. Your Privacy Rights

Depending on your location (for example, the EEA/UK under the GDPR/UK GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. Shoppers should generally exercise these rights through the merchant (the controller) or through Shopify's privacy request flow, which the App fulfills automatically. You may also contact us at support@pretechpark.com and we will assist or route your request appropriately. You have the right to lodge a complaint with your local data protection authority.

12. Children's Privacy

The App is intended for use by businesses and is not directed to children. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide notice within the App or by other reasonable means. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

14. Contact

PreTech Park
Rupali-9B/6, Lake City Concord, Khilkhet, Dhaka 1229, Bangladesh
Email: support@pretechpark.com
Website: https://pretechpark.com