Privacy Policy

1. Introduction

Welcome to PingLane (“we,” “our,” or “us”). PingLane is a web push notification platform that helps Shopify store owners (our “Customers”) send push notifications to their end users (“Subscribers”). This Privacy Policy explains what information we collect, how we use it, and your rights around that information.

PingLane is available as an app on the Shopify App Store. You access PingLane by installing it on your Shopify store. There is no separate PingLane account registration. By installing and using the PingLane app, you agree to the practices described in this policy.

2. Who This Policy Applies To

This policy covers two groups of people:

Customers are Shopify store owners who install PingLane to send push notifications to their audience.
Subscribers are end users who opt in to receive push notifications from a Customer’s website that uses PingLane.

If you are a Subscriber and have questions about how a specific website uses your data, please contact that website directly.

3. Information We Collect

3.1 From Customers (Shopify Store Owners)

When you install PingLane on your Shopify store, your account is created automatically using the information from your Shopify store. We collect:

Account information: Your name, email address, website URL, and phone number.
Organization details: Your organization name and the websites you register on the platform.
Billing information: Your subscription plan and billing cycle. Payments are processed entirely through Shopify’s built-in billing system. We do not handle, store, or share your payment card data. All payment processing stays within Shopify’s own infrastructure.
Usage data: Notifications you create, automation workflows, segments, scheduled reminders, and activity related to your account.
Communications: Any feedback or support requests you send to us.

3.2 From Subscribers (End Users of Customer Websites)

When a visitor opts in to push notifications on a Customer’s website, PingLane collects the following on behalf of the Customer:

Push subscription token: A browser-generated identifier and encryption keys used only to deliver notifications. This is not tied to a personal identity.
Device and browser: Device type (desktop, mobile, tablet) and browser type (Chrome, Firefox, Safari, etc.).
Approximate location: Country, state/region, and city, derived from the IP address at the time of subscription. We do not store raw IP addresses.
Timezone: Picked up from the browser to support time-zone-aware notifications.
Tags: Labels assigned by the Customer to group subscribers (e.g., product interest, loyalty tier).
Customer identity: When a Subscriber is logged in to the Customer’s website, we store identity information such as their email address, phone number, or the Customer’s own customer ID, linked to the subscriber record. The Customer uses this data to send targeted and personalized push notifications.
Behavioral data: Pages viewed and items added to cart, when the Customer has automation features turned on. Also includes product alert preferences (price drop, back-in-stock).
Engagement metrics: Whether a notification was delivered, clicked, or led to a purchase. These are counted per notification, not tracked at an individual level.

4. How We Use This Information

For Customers

To set up and run your PingLane account.
To handle subscription billing.
To give you analytics and reporting on how your notifications are performing.
To send you account alerts, billing notices, and product updates.
To improve and build on the PingLane platform.

For Subscribers (on behalf of Customers)

To deliver push notifications on the Customer’s behalf.
To let Customers segment their audience and send targeted notifications.
To run automation workflows such as cart recovery, welcome messages, and order updates, when the Customer has these turned on.
To show Customers subscriber analytics like counts by country, browser, and device type.

We do not sell Subscriber data to anyone. We do not use Subscriber data for advertising unrelated to the Customer’s own notifications.

5. Cookies and Tracking

PingLane uses minimal cookies and local storage to keep the dashboard working, such as keeping you logged in. We add UTM parameters to notification links so Customers can track traffic in their own analytics tools. We do not run any advertising cookies or third-party tracking on Subscriber devices.

We also use Microsoft Clarity on the PingLane website and customer dashboard to understand how people use the product. Clarity may collect session recordings, clicks, and navigation patterns, but it does not collect personally identifiable information. For more details, see Microsoft’s Privacy Statement.

We only share data in these situations:

With Customers: Subscribers’ push subscription data and analytics are shared with the Customer whose website they subscribed to.
With service providers: We use third-party services to run PingLane, such as hosting and email delivery. These providers can only use your data to carry out work for us. Billing stays entirely within Shopify’s infrastructure and is not shared with any other payment processor.
For legal reasons: We may share data if required by law, a court order, or to protect the safety of PingLane, our Customers, or others.
Business transfers: If PingLane is involved in a merger, acquisition, or asset sale, data may be transferred as part of that process. We will give appropriate notice if this happens.
Security incidents: If our systems or a third-party service we rely on is compromised and your data is affected, we will let you know within 72 hours of confirming the incident. We will tell you what happened, what data was involved, and what we are doing about it. We will keep you updated as things develop, even if we do not have all the answers straight away.

7. Data Storage and Security

All data is stored in the United States (Virginia). This applies to every Customer and every Subscriber, no matter where they are in the world.

PingLane does not offer data residency options. We do not store data in the EU, EEA, or any other region based on where you are located. If you or your Subscribers are in the EU or EEA, their data will be transferred to and stored in the United States. If you are subject to GDPR or a similar law, it is your responsibility to make sure you have a valid legal basis for this transfer. Our Data Processing Agreement includes Standard Contractual Clauses to help with this.

We protect your data using encryption in transit (TLS) and at rest, access controls, and regular security checks.

No system is 100% secure. If you spot a security concern, please contact us at the address below.

8. Data Retention

Customer account data is kept for as long as your account is active. When you close your account, we delete or anonymize your data within a reasonable time, unless we are required by law to keep it longer.
Subscriber data is kept for as long as the push subscription is active. When a Subscriber unsubscribes, their record is marked as inactive. Customers can request deletion of Subscriber records through the dashboard or API.
Analytics data (aggregated counts) may be kept longer in anonymized form.

9. Your Rights

If You Are a Customer

You can access, update, or delete your account data at any time through the PingLane dashboard or by contacting us. You can also request an export of your data.

If You Are a Subscriber

Because PingLane processes your data on behalf of the Customer, your main point of contact for data requests is the website you subscribed to. That said, you can unsubscribe from push notifications at any time through your browser settings:

Chrome: Settings > Privacy and Security > Site Settings > Notifications
Firefox: Settings > Privacy and Security > Permissions > Notifications
Safari: Preferences > Websites > Notifications

Unsubscribing stops all future notifications and marks your subscription as inactive.

10. Children’s Privacy

PingLane is available through the Shopify App Store. Shopify requires all store owners to be at least 18 years old, so PingLane is not available to anyone under 18. We do not knowingly collect personal data from minors. If you believe we have done so by mistake, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will let Customers know about significant changes by email or in-dashboard notice. The “Last Updated” date at the top shows when it was last changed. Continuing to use PingLane after changes take effect means you accept the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please get in touch:

PingLane Email: care@pinglane.com