Privacy Policy

Mega Subscription · Last updated July 30, 2026

Mega Subscription is a Shopify app that lets merchants sell products on a recurring schedule. This policy explains what the app accesses, what it stores, and how long it keeps it.

The merchant who installs the app controls their store's data. Mega Subscription acts on that merchant's behalf and processes data only to provide the app's functionality.

What the app stores

The app keeps only what it needs to operate. Its database contains:

Data	Why
Store domain and app settings	To identify the store and remember setup choices, such as which widget layout is selected.
Shopify access token	To call the Shopify API on the store's behalf.
Subscription plan settings created by the merchant	Delivery frequency, discount, and which products a plan applies to.
Billing attempt records	The Shopify identifiers for a renewal attempt, its outcome, and any payment error, so failed renewals can be surfaced and retried.

The app does not store customer personal information. No customer names, email addresses, phone numbers, or shipping addresses are written to its database. Billing attempt records hold Shopify identifiers and payment error codes only.

What the app reads without storing

To display subscriptions to the merchant and to the subscriber, the app reads the following from Shopify each time a page is loaded, and discards it when the response is sent:

Subscription contracts, including status, delivery schedule, and price
The subscriber's name, email address, and phone number
The shipping address on a subscription
Orders created by a subscription
Products, variants, prices, images, and theme settings

Payment information

The app never receives, handles, or stores card numbers or other payment credentials. When a subscriber updates their payment method, the app asks Shopify to send them a secure link, and the details are entered directly with Shopify. The app only ever sees an identifier for a stored payment method, never its contents.

Where data is held and how it is protected

Hosted on Fly.io in the United States (region iad).
All traffic is encrypted in transit with HTTPS.
Stored data sits on an encrypted volume.
Requests from Shopify are verified before they are processed.

Fly.io is the only third party that processes data on the app's behalf, as its hosting provider. The app does not sell data, share it for advertising, or send it to analytics or marketing services.

Retention and deletion

When the app is uninstalled, the store's record, its subscription plan settings, and its access tokens are deleted.
On a store data erasure request from Shopify, any remaining data for that store is deleted.
On a customer data erasure or access request from Shopify, the app confirms it holds no personal information for that customer, because none is stored.

Subscriptions themselves live in Shopify, not in this app. Uninstalling the app does not delete a store's subscription contracts.

Your rights

If you are a shopper and want to see, correct, or delete the personal information a store holds about you, contact that store directly. They control the data and can pass the request to Shopify, which will relay it to this app automatically.

Changes to this policy

If the app's data handling changes, this page is updated and the date at the top changes with it.

Contact

Questions about this policy can be sent through the support channel listed on the app's Shopify App Store listing.