Privacy Policy

Last updated: March 5, 2026

Boumzoud LLC ("RecurX," "we," "us," or "our") operates the RecurX Subscriptions application (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our Shopify application and visit our website at recurx.app.

By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Information

When you install and use RecurX, we may collect:

  • Name, email address, and business name
  • Shopify store URL and store information
  • Contact information you provide when reaching out to support

Shopify Store Data

Through the Shopify API, we access:

  • Product information (names, prices, variants, images)
  • Customer data (names, emails, addresses — as needed for subscription management)
  • Order and subscription data
  • Theme information for widget rendering

Usage Data

  • Pages visited within our application
  • Features used and interactions
  • Browser type, device information, and IP address
  • Date and time of access

Payment Information

All billing for RecurX is processed through the Shopify App Billing API. We do not directly collect, store, or process any credit card or payment card information.

2. How We Use Your Information

We use the information we collect to:

  • Operate, maintain, and improve the RecurX Service
  • Process and manage subscriptions on behalf of merchants
  • Send transactional emails (subscription confirmations, renewal notices, failed payment alerts)
  • Analyze usage patterns to improve the user experience
  • Provide customer support
  • Prevent fraud and ensure security
  • Comply with legal obligations

3. Data Sharing

We do not sell your personal data. We may share information with:

  • Service Providers: Third-party companies that assist us in operating the Service (hosting, analytics, email delivery)
  • Shopify: As required by Shopify's API Terms of Service and Partner Program Agreement
  • Legal Requirements: When required by law, regulation, or legal process
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

4. Data Security

We implement industry-standard security measures including:

  • TLS/SSL encryption for all data in transit
  • Encrypted storage for sensitive data at rest
  • Role-based access controls
  • Regular security assessments and monitoring

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure.

5. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Restriction: Request restriction of processing
  • Data Portability: Receive your data in a structured, machine-readable format
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent
  • Lodge a Complaint: File a complaint with a supervisory authority

6. Your Rights (CCPA)

If you are a California resident, you have the right to:

  • Know: What personal information is collected, used, shared, or sold
  • Delete: Request deletion of your personal information
  • Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
  • Non-Discrimination: Not receive discriminatory treatment for exercising your rights

7. Cookies & Tracking

We use cookies and similar technologies for:

  • Session Cookies: To maintain your logged-in state
  • Preference Cookies: To remember your settings and preferences
  • Analytics: To understand how you use our Service

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

8. Third-Party Services

Our Service integrates with or uses the following third-party services:

  • Shopify (e-commerce platform)
  • Payment processors (via Shopify Billing)
  • Email service providers (for transactional emails)
  • Analytics services (for usage tracking)

Each of these services has their own privacy policies governing their use of data.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon uninstallation of the RecurX app, we will delete your data within 30 days, unless we are required to retain it for legal or regulatory reasons.

10. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • Company: Boumzoud LLC
  • Address: 2201 MENAUL BLVD NE STE A, Albuquerque, NM 87107, USA
  • Email: [email protected]