Privacy Policy

Last updated: 26 August 2026

1. Who we are

AutoGift & BOGO ("the app") is developed and operated by Joykek, Bağdat Caddesi No: 399, Suadiye, Istanbul, Türkiye. For any question about this policy write to info@joykek.com.

2. Scope

This policy covers the data processed when a Shopify merchant installs and uses the app, and the data processed by this website. It does not cover Shopify's own processing of your store data - that is governed by Shopify's privacy policy.

3. Data we collect

• Store identity: your myshopify.com domain, store name, currency, time zone and admin language.
• Access credentials: the access token Shopify issues to the app, stored encrypted and used only to read the products and collections you select and to write your campaign settings.
• Campaign settings: the campaigns you create - type, scope, thresholds, gift pools, dates, priority.
• Subscription status: which plan the store is on, provided by Shopify's billing system.
• Technical logs: error and request logs kept for a short period to diagnose failures.

4. Data we do not collect

5. Legal basis

We process the data above to perform the contract between the merchant and Joykek (providing the app), and on the basis of our legitimate interest in keeping the service secure and working. Where Turkish law applies, processing is carried out under KVKK Article 5/2.

6. How we use data

To run your campaigns, to show your campaign list and limits in the admin panel, to apply the correct plan, to answer your support requests and to fix errors. We do not sell data, and we do not use it for advertising or profiling.

7. Sharing

• Shopify: the app runs inside Shopify and reads and writes your store data through Shopify's APIs.
• Hosting: the app runs on servers located in Germany (Hetzner Online GmbH).
• E-mail: support and system e-mails are delivered through Resend.

No other third party receives your data.

8. Retention

Campaign settings are kept while the app is installed. When you uninstall, Shopify sends the app a deletion request and your data is removed from our systems within 48 hours. Technical logs are kept for at most 30 days.

9. International transfers

Data is stored in the European Union (Germany). If you are in Türkiye, this means a cross-border transfer within the meaning of KVKK; it takes place with your explicit consent given at installation and under contractual safeguards with our processors.

10. Security

Traffic is encrypted with TLS, access tokens are stored encrypted, the database is not exposed to the public internet, and access is limited to the people who operate the service.

11. Your rights

You may ask what data we hold about your store, ask for it to be corrected or deleted, and object to processing. Write to info@joykek.com; we answer within 30 days.

12. Uninstall

Uninstalling the app from your Shopify admin stops all campaigns immediately and starts the deletion described in section 8. No further action is needed from you.

13. Cookies

The app itself sets no tracking cookies. This website stores your language choice in your browser's local storage; nothing else is stored and no analytics or advertising cookies are used.

The demo video on the home page is hosted on YouTube. It is not loaded when the page opens: until you press play, no request goes to YouTube and it cannot set anything in your browser. Once you start it, the player is loaded from youtube-nocookie.com and from that point YouTube (Google LLC) processes the request under its own privacy policy.

14. Children

The app is a business tool and is not directed at children.

15. Changes

If this policy changes, the date at the top of this page changes with it, and material changes are announced inside the app.

16. Contact

Joykek, Bağdat Caddesi No: 399, Suadiye, Istanbul, Türkiye · info@joykek.com · Contact form