Privacy policy

Who we are

SilverThink makes Shopify apps and spreadsheet templates, and provides web services: Shopify development, SEO and GEO. SilverThink is a brand of HeySERP Marketing Services, Plot No. 17, S/F, Sector 7, Dwarka, New Delhi 110045, India, and is run by Sunny Kumar.

In this policy, "we", "us" and "our" mean HeySERP Marketing Services. For anything about your data, write to support@silverthink.in.

What this covers

One policy covers everything we make, because we handle data the same way across all of it:

• This website, silverthink.in.
• Our Shopify apps, starting with Kurb: Hide Shipping Methods, and any app we release later. Where an app needs something extra, its App Store listing and this page say so.
• Our spreadsheet templates, sold on Etsy.
• Our web services: Shopify development, SEO and GEO projects.

It doesn't cover Shopify, Etsy or any other company's own handling of your data. Their policies apply to their platforms.

This website

The site is a set of static pages. It has no accounts and no analytics. The brief on our Get a quote page sends nothing to our server: it opens your own email app with your brief filled in, and we receive it only if you send that email.

• Cookies: none. The text-size buttons remember your choice in your own browser only. See our cookie policy.
• Server logs: our server, hosted by Vultr, keeps standard request logs (IP address, browser, page requested, time) for 14 days, for security and to keep the site running. We don't use them to identify you.
• Fonts: served from our own server, not from Google or any other font service.
• Email: if you write to us, we keep your message and email address so we can reply.

If we ever add analytics, or a form that sends anything to us, we'll update this section first.

Shopify apps

When a merchant installs one of our apps, Shopify gives the app limited access to that store. Each app asks only for the permissions it needs.

What the app stores

Your customers' data

Checkout apps like Kurb run inside Shopify's checkout, as a Shopify Function. To decide which options to show, Kurb reads the cart, the delivery address fields (address lines, city, state, postal code or pincode, and country) and the customer's tags. This happens inside Shopify, for that checkout only. We don't store, copy or send that data anywhere.

We answer Shopify's privacy requests: customer data requests, customer deletion requests and store deletion requests. Because we hold no customer data, there is nothing to return or delete for customers. When a store uninstalls an app, we delete its connection data (store domain and tokens) straight away. Shopify sends a store deletion request 48 hours later, and we then delete everything else we hold for that store, including its history. Copies in our backups are gone within 14 days (see How long we keep it).

Spreadsheet templates

Templates are sold on Etsy. Etsy handles the payment and download, and shares the order details Etsy shares with every seller, such as your name and Etsy username. We use them only to deliver the order and answer your questions.

The templates themselves have no macros, scripts or links back to us. Whatever you type stays in your own Excel file or Google account.

Web services

For Shopify development, SEO and GEO projects, we use what you share with us: your contact details, project brief, and access to your store, site or tools such as Google Search Console. We use it only to do the work you asked for.

• We ask for staff or collaborator access, never your own login.
• We don't use your data or results for anything else without asking first.
• When the project ends, remove our access. We delete project files on request.

Why we're allowed to use it

We use each kind of data only for the reason in this table. Under India's Digital Personal Data Protection Act, most of it is data you give us yourself for a specific purpose, which the Act allows. Where we need your consent, we ask for it, and you can withdraw it any time by email.

We don't use your data for automated decisions about you, advertising or profiling.

Who we share data with

We don't sell or rent personal data. We share it only with services we need to run SilverThink:

• Shopify: app installs, billing and privacy requests.
• Etsy: template sales.
• Cloudflare: network and email delivery.
• Google: stores our email, and nightly backups of our app database.
• Vultr: hosts this website, our app servers and their database.

We may also share data if the law requires it.

Where data is stored

This website and our app data are hosted with Vultr in New Delhi, India. Our email and our app database backups are stored by Google, which may keep them outside India. Shopify and Etsy store data in their own locations under their own policies. Where data moves between countries, we rely on our providers' standard safeguards, such as the EU Standard Contractual Clauses.

How long we keep it

• App connection data: while the app is installed. Deleted when you uninstall.
• App history (store domain and the dates of installs, plan changes and privacy requests): until Shopify's store deletion request, 48 hours after uninstall.
• App database backups: taken nightly, kept 7 days on our server and 14 days with Google, then deleted.
• Server logs: 14 days, then deleted.
• Support email: up to 2 years after our last message, then deleted.
• Service project files: for the project, then deleted on request or 12 months after it ends.
• Invoices and tax records: as long as Indian tax law requires.

Security

Data moves over encrypted connections, store access tokens are encrypted at rest (AES-256-GCM), backups are encrypted before they leave our server, and only Sunny has access to app systems. No system is perfectly secure; if we ever learn of a breach that affects you, we'll tell you and, where the law requires, the relevant authority without delay. Our security page explains how we protect our systems and what we do in an incident.

Your rights

Wherever you live, you can ask us to:

• tell you what data we hold about you, and give you a copy;
• correct it or bring it up to date;
• delete it;
• stop using it for anything other than what you asked for;
• name someone to act for you if you can't, as India's law allows.

Write to support@silverthink.in. We'll reply within 30 days. This covers rights under India's Digital Personal Data Protection Act, the EU and UK GDPR, and US state privacy laws.

Complaints

Write to Sunny Kumar, who handles privacy and grievances for SilverThink, at support@silverthink.in. If you're not happy with our answer, you can complain to the Data Protection Board of India, or to your local data protection authority if you live elsewhere.

Children

Our products are for businesses and adults. We don't knowingly collect data from anyone under 18. If you think we have, write to us and we'll delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use data we already hold, we'll tell app users in the app and email anyone we work with directly.

Contact

Questions, requests or complaints about privacy: support@silverthink.in. You'll get a reply from Sunny Kumar, who handles privacy for SilverThink.

HeySERP Marketing Services, Plot No. 17, S/F, Sector 7, Dwarka, New Delhi 110045, India.