LevelSend

Privacy policy

Last updated: 18 October 2026

LevelSend ("the app") is an email marketing app for Shopify stores, published by Elektraset, s.r.o. ("we"). This policy explains what data the app processes, why, and for how long. Contact: help@elektraset.com · https://elektraset.com/.

Roles

  • The merchant (the Shopify store that installs LevelSend) decides whom to email. For the personal data of its customers and subscribers, the merchant is the controller.
  • We process that data only on the merchant's behalf, to provide the app (processor).
  • For the merchant's own account data (store name, contact email, plan), we are the controller.

Data we process

From the store, through Shopify's APIs, after the merchant installs the app:

  • Customers: email address, first and last name, email marketing consent state, opt-in level and consent date, tags, number of orders, total spent, date of the last order.
  • Products: title, handle, price, main image (for product blocks in emails).
  • Orders (order created events): the order and checkout identifiers, the customer and the email address, to start post-purchase emails and to stop abandoned-checkout emails for completed checkouts.
  • Abandoned checkouts: email address, first name, line items (title, quantity, price), total and the checkout recovery link, to send the abandoned-checkout email.
  • Store details: store name, contact email, billing address (shown as the postal address in the email footer, as anti-spam laws require), primary domain and currency.

From shoppers who use a LevelSend signup form or popup on the store: email address, optional first name, the time of signup and the consent text they agreed to. The form sets no tracking cookies; it stores only a "dismissed / subscribed" note in the shopper's browser (local storage) so that the popup does not reappear.

From email recipients: unsubscribe requests (link or one-click unsubscribe in the mail client). LevelSend does not track opens or clicks and does not add tracking pixels or redirect links to emails.

From merchants: settings (sender name, reply-to address, monthly cap, brand color), email designs, campaigns, flows and the CSV files they import. Imported files are processed in memory and not stored; the resulting subscribers are written to the store's Shopify customers.

Why we process it

  • Sending the marketing emails the merchant configures (campaigns and the welcome, abandoned-checkout and post-purchase flows) only to people with email marketing consent.
  • Recording and honouring consent and unsubscribes, including writing them back to the Shopify customer.
  • Enforcing the merchant's monthly email cap and showing usage and forecasts.
  • Billing through Shopify, support, security and abuse prevention.
  • Aggregated, non-personal product metrics (for example the number of stores that sent a first email). These contain no customer or store records.

We do not sell personal data, do not use it for advertising, and do not use customer data of one store for any other store.

Storage and security

  • Data is stored in a database on servers operated for Elektraset.
  • Email addresses, names and checkout recovery links are encrypted at rest (AES-256-GCM). Email addresses are looked up through a keyed hash.
  • All traffic uses HTTPS.
  • Access is limited to the people who operate the app.
  • Webhooks from Shopify are verified by signature, and storefront signups are verified by Shopify's app proxy signature.

Sub-processors

  • Shopify (the platform; data access and billing).
  • Resend (email delivery: recipient address, subject and content of each email, plus delivery metadata), USA. Resend: https://resend.com/legal/privacy-policy.
  • The hosting provider of our servers.

Where data leaves the EEA, the transfer relies on the sub-processor's Standard Contractual Clauses or an adequacy decision.

Retention and deletion

  • While the app is installed, data is kept for as long as the merchant uses it. Records of queued and sent emails are kept for the merchant's reporting.
  • Customer redaction: when Shopify sends a customer redaction request (customers/redact), we delete that customer's contact, consent records, checkouts and email records.
  • Data requests: when Shopify sends a data request (customers/data_request), the merchant can download everything LevelSend holds about that customer from the app's Privacy requests page.
  • Uninstall: when the app is uninstalled, sending stops at once. When Shopify sends the shop redaction request (48 hours after uninstall), we delete all of the store's customer data, designs, campaigns and flows. We keep only non-personal billing and install records (dates, plan, amounts) for accounting and aggregated metrics.

Your rights

Shoppers and subscribers can unsubscribe with the link in every email. For access, correction or deletion, they can contact the store they subscribed to; we help the store answer. Merchants can contact us at help@elektraset.com. People in the EU/EEA can also complain to a data protection authority (in Slovakia: Úrad na ochranu osobných údajov SR).

Changes

We will post changes on this page and update the date above. Material changes are announced to installed stores by email.