Privacy Policy

Last updated: May 14, 2026

Cotiza (“the App”) is developed and operated by Viguza Labs (“we”, “us”, “our”). This policy explains what personal data we collect, how we use it, where it is stored, and your rights. We are committed to being transparent about our data practices.

1. Data Collected via Shopify APIs

When you install Cotiza, we access the following data through Shopify’s APIs:

Shop information — store domain, store name, email address, and default currency, obtained at installation and used to identify your account and populate PDF quotes.
Products — titles, variants, prices, SKUs, and images, fetched on demand when you add items to a quote. Product data is not stored.
Access tokens — a Shopify-issued access token that allows the App to call Shopify APIs on your behalf. Stored securely server-side and never exposed to the browser or third parties.

2. Data You Provide Directly

In addition to data from Shopify, we store information you enter into the App:

Client records — name, company, email address, and phone number of clients you add manually.
Quotes — quote line items, quantities, pricing, discounts, tax rates, notes, and status.
Settings — quote number prefix, PDF accent color, and logo URL.

3. Automatically Collected Data

Our hosting infrastructure (Vercel) automatically records standard server logs, including IP addresses and request metadata, for operational and security purposes. These logs are retained for a short period and are not used for marketing or analytics.

The App does not use cookies, tracking pixels, behavioral analytics, or any third-party advertising technologies.

4. How We Use Your Data

We use collected data exclusively to provide the App’s core functionality. We do not use your data for any purpose beyond what is necessary to operate the App:

Displaying, creating, and managing quotes within your Shopify admin.
Searching your product catalog to add items to quotes.
Generating downloadable PDF quotes on demand.
Enforcing plan limits and managing your subscription via Shopify’s billing system.

We do not sell your data, use it for advertising, or share it with any third party beyond the service providers listed below.

5. Data Sharing & Third-Party Processors

We share data only with the following service providers, solely to operate the App:

Supabase — database and storage provider. All app data (shops, clients, quotes) is stored on Supabase servers located in the United States.
Vercel — application hosting provider. Your requests are processed on Vercel’s infrastructure.
Shopify — we communicate with Shopify’s APIs to read products and customer data as described above.

6. Data Retention

We retain your data for as long as Cotiza is installed on your store. Specifically:

Shop, client, and quote data is kept while the App is installed and active.
After uninstallation, we will delete all your shop’s data within 30 days.
You may request deletion of your data at any time by contacting us at the address below.

7. GDPR & Your Rights

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

Access — request a copy of the data we hold about you.
Correction — request correction of inaccurate data.
Deletion — request deletion of your data.
Portability — request your data in a structured, machine-readable format.

Cotiza complies with Shopify’s mandatory GDPR privacy webhooks. Upon receiving a data request or deletion instruction from Shopify, we will fulfill the request within the timeframes required by applicable law.

Note: data is processed and stored in the United States. If you are in the EEA, this represents a transfer of data outside your jurisdiction.

8. Security

All data is transmitted over HTTPS. Shopify access tokens are stored server-side only and are never sent to the browser. We apply industry-standard practices to protect your data against unauthorized access, disclosure, or loss.

9. Changes to This Policy

We may update this policy periodically. The date at the top of this page reflects when it was last revised. Continued use of the App after changes are posted constitutes acceptance of the updated policy.

10. Contact

If you have questions about this privacy policy or wish to exercise your data rights, please contact us:

Viguza Labs
Email: viguzalabs@gmail.com