Data processing terms
How TierWise handles your customers' data on your behalf. These terms apply to every store that installs TierWise. Last updated October 29, 2026.
Who is who
- You are the Shopify store that installs TierWise. You decide to run a loyalty program and you control your customers' data.
- TierWise (Domenico Germano, support@tierwise.io) runs that program for you and handles the data only on your instructions.
In data protection terms you are the controller and TierWise is your processor. Installing TierWise means you accept these terms. They sit alongside our privacy policy, which lists exactly what data is held and why.
What TierWise processes
| Data | Purpose |
|---|---|
| Customers' names and emails | Showing you who your members are, and matching birthday months you import. |
| Order summaries: number, date, amounts, discounts, status, discount codes | Working out each customer's tier and rewards. |
| Tiers, reward codes, gifts, notes and birthday months | Running the program you set up. |
| Reward codes you import from a previous program | Showing each customer their code and marking it used. |
| Your Klaviyo private API key, if you connect Klaviyo, stored encrypted | Sending data to your Klaviyo account on your instruction. |
| A key for Claude, if you make one, stored as a hash | Answering your questions in Claude with your loyalty data, on your instruction. |
| A customer's default address, read at the moment a birthday gift order is made | Shipping that order. It is not stored by TierWise. |
It comes from your Shopify store, from customers who give their birthday month on your Rewards page, and from the files of existing rewards you upload.
Only on your instructions
- TierWise uses your customers' data only to run your loyalty program, as you configure it in the app.
- It is never sold, used for advertising, or combined with another store's data.
- If TierWise is ever legally required to do something else with it, we will tell you first, unless the law forbids that.
Who can see it
Only the person who runs TierWise has access, and only to support and operate the app. Anyone given access in future is bound to keep the data confidential.
How it is protected
- Encrypted in transit and at rest.
- Every request from Shopify is checked for a valid signature before the app acts on it.
- The database accepts only the app's own scoped logins, one per environment, each limited to its own data.
- Secrets are kept in the hosting provider's environment, never in code.
Providers TierWise uses
| Provider | What for | Where |
|---|---|---|
| Shopify | Source of the data, and where tags, fields, codes and gift orders are written | Per your Shopify account |
| MongoDB Atlas | The database | United States |
| Render | The server the app runs on | United States |
Each provider is bound to protect the data at least as well as these terms require. If a provider is added or changed, this page is updated before the change takes effect, and you can uninstall if you object.
Klaviyo is not one of TierWise's providers. If you connect your own Klaviyo account, TierWise sends it your loyalty events and each member's email, tier, spend this year, distance to the next tier and reward, unused codes and join date, on your instruction. In Klaviyo the data falls under your own agreement with Klaviyo. Disconnecting stops it.
Anthropic is not one of TierWise's providers either. If you connect Claude, each question you ask is answered with your loyalty data: member names and emails, tiers, spend, reward codes and campaign results. The answer goes to Anthropic under your own Claude account and agreement. Claude reads and cannot change anything. Removing the key stops it.
Data outside your country
The data is stored in the United States. Where the law requires a safeguard for that transfer, such as for stores in the European Economic Area or the United Kingdom, TierWise relies on the European Commission's Standard Contractual Clauses and the UK addendum, which form part of these terms.
Helping with your customers' requests
- When a customer asks you to erase their data, Shopify passes the request to TierWise and everything held about that customer is deleted.
- When a customer asks to see their data, everything TierWise holds about them is visible on their page in the app, and the members list can be downloaded.
- For anything else, write to us and we will help you respond.
If something goes wrong
If a security breach affects your customers' data, we will tell you without undue delay, and within 72 hours of finding out, with what we know about what happened and what was affected.
When you stop using TierWise
When you uninstall, Shopify asks TierWise to delete your store's data 48 hours later, and all of it is deleted: order summaries, customer names and emails, tiers, reward history, settings and the access key. To have it deleted sooner, write to us. Nothing in your own Shopify store is deleted by this.
Checking we keep to this
Ask us at any time and we will answer your questions about how your data is handled, and give you the information you need to show you meet your own obligations.
Changes to these terms
When these terms change, the new version is posted here with a new date at the top. A change that reduces how your data is protected will not apply to you until you have been told and given the chance to uninstall.
Contact
Domenico Germano, TierWise. support@tierwise.io