Privacy Policy

1. Who we are

This Privacy Policy describes how NimbusWay (“we”, “us”, or “our”) collects, uses, and shares information in connection with the AgeShield Shopify application (the “App”). AgeShield helps merchants display age verification gates on Shopify storefronts for age-restricted products.

Contact: support@ageshield.app

Product website: https://www.nimbusway.com

2. Scope

This policy covers:

• Merchant data processed when installing and using AgeShield
• Limited storefront visitor data related to age verification events
• How we respond to privacy and data rights requests

Merchants are responsible for their own storefront privacy notices to shoppers. This policy explains AgeShield’s role as a service provider / processor for App-related data.

3. Information we collect

3.1 From Shopify and merchants

• Shop domain and installation / session information needed to authenticate the App
• App configuration set by merchants (for example: popup copy, colors, logo URLs, targeting rules, geo age rules, cookie duration, plan settings)
• Limited product / collection / tag identifiers selected for targeting rules
• Subscription / billing plan status provided through Shopify Billing
• Support communications you send us (for example, email inquiries)

3.2 From storefront visitors (shoppers)

• Age verification outcome (passed or blocked), timestamp, page path, optional country/region code, browser user agent, and trigger scope
• A first-party cookie (or similar browser storage) may be used to remember a successful verification for a merchant-configured period (up to 365 days on paid plans)
• We do not require shoppers to create an AgeShield account, and we do not intentionally collect shopper names, emails, phone numbers, or government ID documents
• Date-of-birth inputs, when used, are processed to determine whether the visitor meets the configured age threshold; we do not use DOB values for advertising profiles

4. How we use information

• Provide, operate, secure, and improve the App
• Render age gates, targeting rules, geo thresholds, and checkout / cart verification features configured by the merchant
• Show merchant dashboards (verification counts, pass rates, trends)
• On Enterprise plans, retain verification event records for compliance audit logs and CSV export requested by the merchant
• Process subscriptions and provide customer support
• Comply with law and Shopify platform requirements

We do not sell personal information and do not use shopper verification data for third-party advertising.

5. Cookies and similar technologies

AgeShield may set a storefront cookie (or use local browser storage) to remember that a visitor has already passed age verification, so the popup is not shown repeatedly. Merchants control whether remembering is enabled and how long it lasts.

Shopify and the merchant’s theme may set additional cookies governed by their own policies.

6. Sharing of information

We may share information with:

• Shopify, as required to operate an embedded Shopify app and billing
• Infrastructure providers that host the App and database (for example cloud hosting and PostgreSQL hosting), under contractual confidentiality and security obligations
• Professional advisors or authorities when required by law or to protect rights and safety

Merchants with Enterprise Audit may export verification event CSV files from the App. Those exports are controlled by the merchant.

7. Data retention

• Merchant configuration is retained while the App is installed and as needed to provide the service
• Merchants can choose whether configuration data is retained after uninstall (Settings → retain data on uninstall)
• Verification events used for analytics / audit are retained as needed for the merchant’s subscription features and legitimate operational needs, unless a valid deletion request requires earlier removal
• We honor Shopify mandatory compliance webhooks for customer data requests, customer redaction, and shop redaction

8. International transfers

We may process and store information on servers located outside your country of residence (including outside the EEA/UK). Where required, we use appropriate safeguards for cross-border transfers.

9. Security

We use administrative, technical, and organizational measures designed to protect App data, including authenticated Shopify sessions and access controls. No method of transmission or storage is 100% secure.

10. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data, or to object to certain processing. Merchants and individuals can contact us at support@ageshield.app.

Shoppers should typically contact the merchant first for storefront privacy requests. We will assist merchants in responding to requests that relate to data processed by AgeShield.

11. Children’s privacy

AgeShield is designed to help merchants restrict access to age-restricted content. The App is not directed to children, and we do not knowingly collect personal information from children for our own marketing purposes.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the App after an update constitutes acceptance of the revised policy where permitted by law.

13. Contact

For privacy questions or requests related to AgeShield:
Email: support@ageshield.app