Privacy policy

Last updated October 29, 2026

Soira is a Shopify app made by Packsaddle Software, LLC ("we", "us"). It lets a store's customers host shopping parties: a host shares a party link with friends, they shop the store, and the host earns rewards from the store. This policy explains what data the app handles for the stores that install it, their hosts and their guests.

What we collect

Store details: the store's Shopify domain and ID, name, currency, time zone, billing status, and the access token Shopify issues when the app is installed.
Hosts: first name, email address, Shopify customer ID, confirmation that they are 18 or older, and the parties they host (name, dates, theme, featured products). We find or create the host as a customer in the store so their reward can be issued as store credit. To recognize orders the host places as a "guest", we keep salted one-way hashes of the host's address, phone number and email, never the address or phone number themselves.
Guests who join a party's guest list: first name and email address, only when the guest enters them on the party page and agrees to party emails.
Party orders: for orders placed through a party, the order ID and number, the amount that counts toward the party, refunds and cancellations, and the Shopify customer ID on the order. To spot made-up guests we compare an order's address, phone and email with the host's (through those hashes) when the order arrives, and keep only the result (flagged or not), not the order's address or phone number. We also keep a one-way hash of the order's email (never the email itself), so the host's party screen can show "Jess just ordered!" for guests who joined the guest list.
Rewards and fees: the rewards each party earned and the usage fee charged for it.

We do not collect payment card details: every guest pays through the store's normal Shopify checkout.

How we use it

To run each party: its page, its link, its live total and its reward level.
To issue the host's reward through Shopify, as store credit or a single-use discount code.
To send party emails: to the host about their own party, and to guests who joined the guest list (party started, 24 hours left, and a reminder a few weeks later). Every guest email has a one-click unsubscribe link. We never email anyone else.
To show the merchant their party results and charge the usage fee on their Shopify bill.

A host sees their party's total and the first names of guests who chose to join the guest list. Hosts never see what any guest ordered. We don't sell data, use it for advertising, or build profiles of shoppers.

Where it's stored and who processes it

Data is stored with Cloudflare (Workers and D1), encrypted in transit and at rest. Party emails are sent with Cloudflare's email service. Shopify processes orders, store credit, discount codes and billing. We use no other processors.

How long we keep it

We keep party, order and reward records while the app is installed, so rewards and fees stay correct. When a store uninstalls, we delete its access tokens right away and all remaining store data when Shopify sends its shop deletion request (48 hours after uninstall), except a one-way hash of the store's domain that records whether the store has used its free first party, and monthly totals under that same hash (number of parties, guest orders and sales, rewards and fees; no names, emails or customer details) that we use to understand how the app is used. When Shopify asks us to redact a customer, we remove that person's name, email and customer ID from our records.

Your choices

Guests can leave a party's guest list from any party email. Merchants can request a copy or deletion of their store's data at any time. Hosts and guests can ask the store, or contact us directly. Shopify forwards data and deletion requests to us and we answer them.

Contact

Packsaddle Software, LLC, North Carolina, USA. support@packsaddlesoftware.com

This policy is governed by the laws of the State of North Carolina. If we change it, we'll update the date above.