This Privacy Policy describes how Veriqo ("we", "us", or "our") handles information when merchants install and use the Veriqo Shopify app, and when store visitors interact with the age verification popup on a merchant's storefront. Veriqo is hosted at https://veriqo.fly.dev.
1. Who this policy covers
This policy applies to:
- Shopify merchants who install Veriqo
- Visitors to a merchant's online store who see the age verification popup or related storefront features
This is not the privacy policy for Shopify itself, MongoDB Atlas, Fly.io, or any merchant's own store. Those services have their own policies.
2. Information we collect from merchants
When a merchant installs Veriqo, Shopify provides the information needed to run the app, including the shop domain and an offline access token. We store Shopify session data so the merchant can stay signed in to the app.
Merchants also save settings in the Veriqo dashboard, such as:
- Age gate text, colors, logo URL, terms copy, and verification rules
- Country and region restriction settings
- Translation preferences
- Shopify billing and subscription status for the Veriqo plan
Shop settings are stored as a JSON metafield on the merchant's Shopify shop. Logo files that a merchant uploads are stored in Shopify Files. Subscription records used for plan access are stored in our database.
3. Information from store visitors
Veriqo does not create customer accounts and does not store names, emails, dates of birth, IP addresses, or other personal profiles for store visitors.
If a merchant uses the date-of-birth check, the visitor selects a month, day, and year in the browser. Age is calculated on that device and compared with the merchant's minimum age. The date is not sent to Veriqo. It is not written to analytics, cookies, local storage, or application logs. After a successful check, the browser keeps only a verification flag: the value true, and an expiry time when the merchant has turned remembering on.
When a visitor passes or is rejected, the storefront may send one analytics event. That event contains the shop domain, whether the result was verified or rejected, a device category (desktop, mobile, or tablet), and a two-letter country code. We store those as daily totals per shop. They are not tied to an individual visitor, and they do not include the date of birth or an IP address.
The age popup may save that verification flag in the visitor's browser (cookie or local storage) so they are not asked again for the period the merchant configured. That value stays in the visitor's browser on the merchant's store domain.
For country rules and analytics, the visitor's browser requests a country code from country.is. That service receives the network connection for the lookup. Veriqo reads only the two-letter country code and does not read or store an IP address from the response. If the lookup fails, the storefront uses the Shopify market country instead.
The settings request can include that country code and the storefront language. If the country code is missing, the app may read a country-code header from the host, such as CF-IPCountry. Those headers are country codes, not IP addresses, and they are not saved as visitor records. Automatic translation follows the storefront language. A country-based translation is used only when the storefront language is unavailable and the merchant has automatic translation turned on.
We do not sell visitor data.
4. How we use information
- Operate the Veriqo dashboard and storefront age gate
- Save merchant settings and show a live preview
- Process Shopify billing for the Veriqo plan
- Show merchants aggregated verification analytics
- Comply with Shopify mandatory webhooks, including shop uninstall and redaction
- Keep the app secure and diagnose errors
5. Where information is stored
- Shopify: shop metafields for settings, Files for uploaded logos, and billing records processed by Shopify
- MongoDB: Shopify sessions, daily analytics counters, and subscription status. Analytics counters do not include dates of birth or IP addresses.
- Fly.io: the application that serves this website and the merchant dashboard
These providers may process data in the regions where they operate. We do not use merchant or visitor data for advertising.
6. Sharing
We share information only as needed to run Veriqo: with Shopify (to authenticate, bill, and store shop settings), with our hosting and database providers, and if required by law. The storefront also calls country.is from the visitor's browser to obtain a country code. We do not send dates of birth to that service. We do not sell personal information.
7. Retention and deletion
Session, analytics, and subscription records are kept while the app is installed and as needed to operate the service. When Shopify sends a shop/redact webhook after uninstall, we delete that shop's sessions, analytics documents, and subscription records from our database. Shop metafields and Files remain under the merchant's Shopify store until the merchant or Shopify removes them.
We do not store Shopify customer records. If Shopify sends a customers/redact or customers/data_request webhook, we confirm that no customer records are held.
8. Merchant responsibilities
Merchants control the age gate copy, minimum age, countries, and whether the popup is enabled. Merchants are responsible for the legal requirements that apply to their store, including age-restricted products and notices to their own customers.
9. Children
Veriqo is a merchant tool, not a service directed at children. We do not knowingly collect personal information from children. The storefront check only records anonymous daily totals described above.
10. Security
Access to the merchant dashboard uses Shopify authentication. Secrets and database credentials are stored as environment variables on the host, not in the public app listing. No method of transmission or storage is completely secure.
11. Changes
We may update this policy as Veriqo changes. The effective date at the top of this page will be revised when we do. The current version is always available at https://veriqo.fly.dev/privacy-policy.
12. Contact
For privacy questions about Veriqo, contact us through the Veriqo listing on the Shopify App Store, or through the Shopify Partner support channel linked from your app installation.