# Privacy policy How SilverThink handles data across this website, our Shopify apps, our spreadsheet templates and our web services. One policy for all of them. Last updated **23 Oct 2026** 6 min read The short version - We don't sell your data, and never will. - Our Shopify apps don't store your customers' data. - Templates never send us what you type. - This website sets no cookies and runs no tracking. - Project files are used only for your project. - Email us to see or delete anything we hold. Section 1 ## Who we are SilverThink makes Shopify apps and spreadsheet templates, and provides web services: Shopify development, SEO and GEO. SilverThink is a brand of **HeySERP Marketing Services**, Plot No. 17, S/F, Sector 7, Dwarka, New Delhi 110045, India, and is run by Sunny Kumar. In this policy, "we", "us" and "our" mean HeySERP Marketing Services. For anything about your data, write to **support@silverthink.in**. Section 2 ## What this covers One policy covers everything we make, because we handle data the same way across all of it: - **This website**, silverthink.in. - **Our Shopify apps**, starting with Kurb: Hide Shipping Methods, and any app we release later. Where an app needs something extra, its App Store listing and this page say so. - **Our spreadsheet templates**, sold on Etsy. - **Our web services**: Shopify development, SEO and GEO projects. It doesn't cover Shopify, Etsy or any other company's own handling of your data. Their policies apply to their platforms. Section 3 ## This website The site is a set of static pages. It has no accounts and no analytics. The brief on our [Get a quote](https://silverthink.in/get-quote) page sends nothing to our server: it opens your own email app with your brief filled in, and we receive it only if you send that email. - **Cookies:** none. The text-size buttons remember your choice in your own browser only. See our [cookie policy](https://silverthink.in/cookies) . - **Server logs:** our server, hosted by Vultr, keeps standard request logs (IP address, browser, page requested, time) for 14 days, for security and to keep the site running. We don't use them to identify you. - **Fonts:** served from our own server, not from Google or any other font service. - **Email:** if you write to us, we keep your message and email address so we can reply. If we ever add analytics, or a form that sends anything to us, we'll update this section first. Section 4 ## Shopify apps When a merchant installs one of our apps, Shopify gives the app limited access to that store. Each app asks only for the permissions it needs. ### What the app stores | Data | Why | |---|---| | Store domain, plus access and refresh tokens from Shopify | To connect the app to your store. No staff names or emails are stored | | The rules and settings you create | To run the app. Kurb saves these inside your own Shopify store | | Your plan | Read from Shopify to apply free or paid limits. We keep a record of plan changes (plan name and date). Billing goes through Shopify; we never see card details | | A short history for each store: installs, uninstalls, plan changes and privacy requests, with dates | Support and accounts. Deleted with the rest of the store's data, 48 hours after uninstall (below) | | Messages you send to support | To help you. Kept in our email, not in the app | ### Your customers' data Checkout apps like Kurb run inside Shopify's checkout, as a Shopify Function. To decide which options to show, Kurb reads the cart, the delivery address fields (address lines, city, state, postal code or pincode, and country) and the customer's tags. This happens inside Shopify, for that checkout only. **We don't store, copy or send that data anywhere.** We answer Shopify's privacy requests: customer data requests, customer deletion requests and store deletion requests. Because we hold no customer data, there is nothing to return or delete for customers. When a store uninstalls an app, we delete its connection data (store domain and tokens) straight away. Shopify sends a store deletion request 48 hours later, and we then delete everything else we hold for that store, including its history. Copies in our backups are gone within 14 days (see How long we keep it). Section 5 ## Spreadsheet templates Templates are sold on Etsy. Etsy handles the payment and download, and shares the order details Etsy shares with every seller, such as your name and Etsy username. We use them only to deliver the order and answer your questions. The templates themselves have no macros, scripts or links back to us. Whatever you type stays in your own Excel file or Google account. Section 6 ## Web services For Shopify development, SEO and GEO projects, we use what you share with us: your contact details, project brief, and access to your store, site or tools such as Google Search Console. We use it only to do the work you asked for. - We ask for staff or collaborator access, never your own login. - We don't use your data or results for anything else without asking first. - When the project ends, remove our access. We delete project files on request. Section 7 ## Why we're allowed to use it We use each kind of data only for the reason in this table. Under India's Digital Personal Data Protection Act, most of it is data you give us yourself for a specific purpose, which the Act allows. Where we need your consent, we ask for it, and you can withdraw it any time by email. | Data | Purpose | Legal basis (EU and UK GDPR) | |---|---|---| | Website server logs | Security and keeping the site up | Legitimate interests | | Emails you send us | Replying and helping you | Legitimate interests, or steps you asked for before a contract | | App connection data | Running the app you installed | Contract | | Etsy order details | Delivering your template and support | Contract | | Project details and access | Doing the work you hired us for | Contract | | Invoices | Accounts and tax | Legal obligation | We don't use your data for automated decisions about you, advertising or profiling. Section 8 ## Who we share data with We don't sell or rent personal data. We share it only with services we need to run SilverThink: - **Shopify**: app installs, billing and privacy requests. - **Etsy**: template sales. - **Cloudflare**: network and email delivery. - **Google**: stores our email, and nightly backups of our app database. - **Vultr**: hosts this website, our app servers and their database. We may also share data if the law requires it. Section 9 ## Where data is stored This website and our app data are hosted with Vultr in New Delhi, India. Our email and our app database backups are stored by Google, which may keep them outside India. Shopify and Etsy store data in their own locations under their own policies. Where data moves between countries, we rely on our providers' standard safeguards, such as the EU Standard Contractual Clauses. Section 10 ## How long we keep it - **App connection data:** while the app is installed. Deleted when you uninstall. - **App history** (store domain and the dates of installs, plan changes and privacy requests): until Shopify's store deletion request, 48 hours after uninstall. - **App database backups:** taken nightly, kept 7 days on our server and 14 days with Google, then deleted. - **Server logs:** 14 days, then deleted. - **Support email:** up to 2 years after our last message, then deleted. - **Service project files:** for the project, then deleted on request or 12 months after it ends. - **Invoices and tax records:** as long as Indian tax law requires. Section 11 ## Security Data moves over encrypted connections, store access tokens are encrypted at rest (AES-256-GCM), backups are encrypted before they leave our server, and only Sunny has access to app systems. No system is perfectly secure; if we ever learn of a breach that affects you, we'll tell you and, where the law requires, the relevant authority without delay. Our [security page](https://silverthink.in/security) explains how we protect our systems and what we do in an incident. Section 12 ## Your rights Wherever you live, you can ask us to: - tell you what data we hold about you, and give you a copy; - correct it or bring it up to date; - delete it; - stop using it for anything other than what you asked for; - name someone to act for you if you can't, as India's law allows. Write to support@silverthink.in. We'll reply within 30 days. This covers rights under India's Digital Personal Data Protection Act, the EU and UK GDPR, and US state privacy laws. ### Complaints Write to Sunny Kumar, who handles privacy and grievances for SilverThink, at support@silverthink.in. If you're not happy with our answer, you can complain to the Data Protection Board of India, or to your local data protection authority if you live elsewhere. Section 13 ## Children Our products are for businesses and adults. We don't knowingly collect data from anyone under 18. If you think we have, write to us and we'll delete it. Section 14 ## Changes to this policy When we change this policy, we update the date at the top. If a change affects how we use data we already hold, we'll tell app users in the app and email anyone we work with directly. Section 15 ## Contact Questions, requests or complaints about privacy: **support@silverthink.in**. You'll get a reply from Sunny Kumar, who handles privacy for SilverThink. HeySERP Marketing Services, Plot No. 17, S/F, Sector 7, Dwarka, New Delhi 110045, India.