Promo Party Pro
Privacy Notice

Effective Date: April 23rd, 2026
Last Updated: April 23rd, 2026

Scope. This notice covers two surfaces: (1) the marketing website at promoparty.app, and (2) the Promo Party Pro app rendered inside the Shopify admin. The marketing site uses Google Tag Manager to load advertising and analytics tools (currently the LinkedIn Insight Tag, with Microsoft Clarity planned). The embedded app does not load any of these. ETHERCYCLE LLC ("we", "us", "our") is the data controller for marketing-site visitors and a data processor for merchant data accessed through the App.

1. What We Collect

Marketing site visitors (promoparty.app):

• Server logs: IP address, user-agent, referrer, request path, timestamp
• Google Tag Manager (tag container — see Section 3)
• LinkedIn Insight Tag for B2B advertising (see Section 4)
• Microsoft Clarity session-replay analytics (see Section 5)

Merchants using the App (inside Shopify admin):

• Shopify-provided shop information: shop domain, owner email, plan
• Cart contents read in real time to power gift-with-purchase offers (not stored)
• Sentry error logs (anonymized stack traces, technical context)
• Mantle billing and usage analytics (shop ID, usage events)
• No session-replay analytics, no advertising trackers, no Google Tag Manager inside the embedded app.

2. How We Use It

• Operate, secure, and improve the App and the marketing site
• Measure marketing-site usage and the effectiveness of our advertising
• Run remarketing and conversion measurement on LinkedIn for our B2B ad campaigns
• Provide gift-with-purchase functionality on merchant storefronts
• Diagnose errors and performance issues
• Bill for the service
• Comply with legal obligations

3. Google Tag Manager (Marketing Site Only)

We use Google Tag Manager (container GTM-PFK889TM) on the promoparty.app marketing site to load and manage the analytics and advertising tags described in Sections 4 and 5. GTM is provided by Google LLC. GTM itself does not collect personal information about visitors; it loads the other tags listed below.

• Where data goes: Google data centers, primarily in the United States.
• Opt out: use the Your Privacy Choices link in the footer to control which tags GTM is allowed to load, or email support@ethercycle.com.

4. LinkedIn Insight Tag (Marketing Site Only)

We use the LinkedIn Insight Tag on the promoparty.app marketing site for B2B remarketing and conversion measurement of our active LinkedIn advertising campaigns. The tag is provided by LinkedIn Corporation, a Microsoft subsidiary.

• Data collected: IP address, timestamp, browser and device metadata, page URL, and — where the visitor is signed in to LinkedIn — LinkedIn member ID.
• Where data goes: LinkedIn / Microsoft data centers, processed under the LinkedIn Privacy Policy.
• This is "sharing" of personal information for cross-context behavioral advertising under the California Privacy Rights Act (CPRA).
• Opt out: use the Your Privacy Choices link in the footer, manage your LinkedIn ad-settings, or email support@ethercycle.com. We honor Global Privacy Control (GPC) signals where technically feasible.

5. Microsoft Clarity (Marketing Site Only)

We use Microsoft Clarity on the promoparty.app marketing site to understand how visitors use our pages. Clarity is provided by Microsoft Corporation. Clarity is not loaded inside the Promo Party Pro app in the Shopify admin.

• Data collected: mouse movement, clicks, scrolls, page navigation, browser metadata, and DOM events. All form input content is masked by default and is not transmitted to Microsoft.
• Configuration: Strict masking mode with cookies disabled. Clarity may use device storage (such as localStorage) or session-scoped identifiers in place of cookies.
• Where data goes: Microsoft Azure data centers in the United States.
• Retention: Session recordings are retained for 30 days. Heatmaps and labeled or favorited sessions are retained for 13 months.
• Opt out: Visit Microsoft's Clarity opt-out page, send an opt-out request to support@ethercycle.com, or enable Global Privacy Control (GPC) in your browser. We honor GPC signals.
• Microsoft's privacy practices: See the Microsoft Privacy Statement.

6. Sub-Processors

We share limited data with the following service providers:

7. California Invasion of Privacy Act (CIPA) Notice

Visitors to promoparty.app: by continuing to use this site, you acknowledge and consent that your interactions (clicks, scrolls, mouse movement, page navigation, masked-input form interactions) may be recorded, measured, and shared with third parties — including Google, LinkedIn, and Microsoft — for analytics and advertising purposes. Form input content is masked by Microsoft Clarity and is not captured. This notice is provided in compliance with the California Invasion of Privacy Act (Cal. Penal Code §§ 631, 632) and analogous state wiretap and electronic-communications statutes. If you do not consent, exit the site or use one of the opt-out mechanisms in Sections 3, 4, and 5 above.

8. California Rights (CCPA / CPRA) — Your Privacy Choices

You can re-open the consent banner at any time by clicking "Your Privacy Choices" in the footer of any page on this site. That is the fastest way to change which analytics and advertising services are allowed.

• Categories of personal information collected: identifiers (IP address, online identifiers, LinkedIn member ID where signed in), internet activity (browsing data, interaction with the marketing site), geolocation (approximate, derived from IP), and commercial information (for merchants: shop and billing data).
• Sensitive personal information: none collected.
• Sharing for cross-context behavioral advertising: we share personal information with LinkedIn Corporation via the LinkedIn Insight Tag for B2B remarketing and conversion measurement of our active advertising campaigns.
• Sale of personal information: we do not sell personal information for monetary consideration.
• Your right to opt out of sharing: use any of the following mechanisms.
  1. Send an email to support@ethercycle.com with subject "CCPA Opt-Out." We respond within 15 business days.
  2. Enable Global Privacy Control in your browser. We honor GPC signals where technically feasible.
  3. Use the vendor-specific opt-outs linked in Sections 3, 4, and 5.
• Other rights: right to know, right to delete, right to correct, right to limit use of sensitive PI, right to non-discrimination. To exercise, email support@ethercycle.com. We respond within 45 days.
• Authorized agents: may submit requests on your behalf with written authorization.
• 12-month look-back: available on request.

9. EEA / UK / Swiss Rights (GDPR / UK GDPR)

• Legal basis: legitimate interest for site operation, security, and error monitoring; consent for the LinkedIn Insight Tag and Microsoft Clarity in the EEA, UK, and Switzerland (gated by our cookie consent mechanism).
• Your rights: access, rectification, erasure, restriction of processing, data portability, objection, and the right to lodge a complaint with your supervisory authority.
• Cross-border transfers: data may be transferred to the United States. Where required, transfers are governed by Standard Contractual Clauses with the receiving sub-processor.
• Contact: support@ethercycle.com. We do not currently designate an Article 27 EU representative; for residents of the EEA, contact us through the support email above.

10. Cookies and Similar Storage

• Essential storage: session and authentication storage required to operate the site and the App.
• Analytics: Microsoft Clarity is configured with cookies disabled and may use device storage (such as localStorage) or session-scoped identifiers.
• Advertising: the LinkedIn Insight Tag may set li_sugr, bcookie, lidc, UserMatchHistory, and AnalyticsSyncHistory cookies for remarketing and conversion measurement.
• All non-essential categories are gated by your consent. The consent banner appears on your first visit; you can change your choices at any time via the "Your Privacy Choices" link in the footer.

11. Data Retention and Deletion

• Merchants: uninstalling the App ends our access. Data retained by us is purged within 30 days of uninstall, except where retention is required by law.
• Marketing-site visitors: Microsoft Clarity retains session recordings for 30 days and heatmaps and labeled sessions for 13 months. LinkedIn Insight Tag data is retained per the LinkedIn Privacy Policy. To request deletion outside these schedules, email support@ethercycle.com.
• Server logs: retained for up to 90 days for security and diagnostic purposes.

12. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information. No system is perfectly secure. Notify us immediately at support@ethercycle.com if you suspect a security incident.

13. Children

The App and the marketing site are not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from children. If you believe we have done so, contact us and we will delete it.

14. Changes

We may update this notice. Material changes will be communicated by in-app banner, email to merchants, or a prominent notice on this page at least 30 days before they take effect, where required.

15. Contact