Privacy policy — Lilya: Installment Table
What the app accesses, what it stores, and when it is deleted.
This policy describes how Lilya: Installment Table (listed in the Shopify App Store as “Lilya: Taksit Tablosu”, “the app”) handles data when a Shopify merchant installs and uses it. The app is made by Lilya Work. Contact: support@lilya.work.
Who this applies to
The app is used by merchants and their staff in the Shopify admin. It stores the merchant’s card installment rates and shows installment options on the store’s product pages through theme blocks. Shoppers see those options; the app does not collect personal data about the merchant’s customers.
Data the app accesses
When you install the app you grant it the Shopify permission read_products. With it the app lets you pick collections for installment limits. The theme blocks read public product data (prices, tags, collections) in the shopper’s browser. The app does not read orders, customers or payment details.
Data the app stores
- Your store’s myshopify.com domain and the access token Shopify gives the app.
- Your installment settings: payment provider template, card families, installment rates, rules, design choices, and your store’s money format and currency.
- A copy of these settings in an app-data metafield of your store, which the theme blocks read.
- Your plan and trial status.
Payment provider keys
If you use “Import from iyzico” or “Import from PayTR”, the keys you type are sent to the provider once to read your installment rates. They are not stored, logged or shown again. Only the resulting rates are saved.
How the data is used
Only to provide the app’s features. We do not sell data, use it for advertising, or share it with third parties other than the service providers below.
Service providers
- Cloudflare, Inc. runs the app and stores its data (Workers and D1 database, Western Europe). Error logs contain your store domain and are kept by Cloudflare for a few days.
- Shopify processes billing through Shopify App Pricing. The app asks Shopify’s Partner API which plan your store is on.
- iyzico and PayTR receive your keys only when you start an import yourself.
Retention and deletion
- When you uninstall the app, its access token is deleted and Shopify removes the app-data metafield.
- 48 hours after you uninstall, Shopify asks us to erase your store’s data (shop/redact) and the app deletes your settings and plan records. If you reinstall within those 48 hours, they are kept.
- Shopify’s customer data requests are answered, but there is nothing to return or delete because the app stores no customer data.
Security
Admin requests are authenticated with Shopify session tokens and webhooks with Shopify’s HMAC signature. Data is sent over HTTPS only.
Not financial advice
Installment amounts are calculated from the rates you enter and are indicative. Your payment provider decides the amounts at checkout.
Your rights
You can ask for a copy of the data the app holds about your store, or ask us to delete it, by writing to support@lilya.work. You can also complain to the data protection authority where you live.
Changes
If we change this policy we update the date at the top of this page.