Privacy Policy

Apps this policy covers

This policy applies to merchants who install our apps and to visitors of stores where those apps are enabled. It covers:

• Constellation Accessibility — a storefront accessibility toolbar
• BarBright — an announcement bar
• Hotpopz — a storefront video reel
• Logo Parade — a logo strip for the theme
• Rivio — a storefront video widget

It does not cover a merchant’s own store, Shopify’s platform, or other Bravostar products. Those have their own terms and notices.

The short version

These apps display content the merchant configures in Shopify. They do not read customer lists, orders, or checkout data, and we do not sell personal information.

Constellation Accessibility is the only app that stores data on our systems: a Shopify session so the merchant can open the app in Shopify Admin. On the storefront, a visitor’s accessibility choices stay in that visitor’s browser. They are not sent to us.

BarBright, Hotpopz, Logo Parade, and Rivio request no Shopify API access. Their settings live in the merchant’s theme on Shopify, not on Bravostar servers.

Constellation Accessibility

Merchant session

When a merchant installs or opens the app, Shopify authenticates them and we store a session so the embedded app can stay signed in. That record can include:

• The shop domain (for example, your-store.myshopify.com)
• The OAuth access token, its expiry, and the granted scope
• For the staff member who signed in: Shopify user id, first and last name, email address, locale, and whether they are the account owner or a collaborator

The app requests the read_themes scope so it can connect to the shop and point the merchant to the theme editor. We do not copy theme files, products, customers, or orders onto our servers.

We use the session only to run the app: authenticate the merchant, show install status, and link to the theme editor. We delete session records for a shop when Shopify tells us the app was uninstalled.

Storefront preferences

If the merchant enables the widget, visitors can change text size, spacing, a dyslexia-friendly font, contrast, color inversion, grayscale, link highlighting, cursor size, a reading guide, motion, and focus highlighting.

Those choices are saved in the browser’s local storage on the store’s domain, under the key a11y_widget_state. The widget does not send them to Bravostar. It does not set tracking cookies, and it does not identify the visitor.

The merchant controls whether the widget is on. Visitors can clear the saved choices by clearing site data for that store in their browser.

BarBright, Hotpopz, Logo Parade, and Rivio

These are theme app extensions. Merchants set them up in the Shopify theme editor. Settings can include announcement text, colors, logos, videos from Shopify Files, captions, and links the merchant chooses.

Shopify stores that configuration with the merchant’s theme. We do not receive a copy. These apps:

• Request no Shopify Admin API scopes
• Do not read orders, customers, products, or other shop data
• Do not send storefront visitor activity to Bravostar
• Do not use cookies or local storage for tracking or analytics

Videos and images play or load from Shopify (or from a URL the merchant entered). Buttons and links go to addresses the merchant provided. Merchants are responsible for the content they publish and for their own privacy notices.

What we do not do

• We do not sell personal information.
• We do not share personal information for cross-context behavioral advertising.
• We do not build advertising profiles of shoppers or merchants.
• We do not use the apps to collect payment details.

Who else processes data

Shopify hosts the store, the theme, app installation, and billing. Shopify’s own privacy policy describes how Shopify handles that data. Questions about a specific store’s customer data should go to that merchant and to Shopify.

We use infrastructure providers to host the Constellation Accessibility app and its session database, and to host this website. They process data only so we can operate the apps and the site. We do not authorize them to use it for their own marketing.

This website may keep ordinary server logs (IP address, browser type, date and time, and the page requested). We use those logs for security and operations, not for advertising.

Shopify privacy webhooks

Shopify can send mandatory privacy webhooks: a customer data request, a customer deletion request, and a shop deletion request. We acknowledge those webhooks.

We do not keep a database of store customers, so a customer request usually has no records for us to export or delete. Shop sessions for Constellation Accessibility are removed when the app is uninstalled. If you believe we still hold information about your shop or a customer, email us and we will look.

Retention

Constellation Accessibility session data is kept while the app is installed and is deleted after uninstall. Theme settings for every app remain in the merchant’s Shopify account until the merchant changes or removes them. Uninstalling an app removes it from the store; leftover theme content is controlled in Shopify.

Your choices and requests

Merchants can uninstall an app in Shopify Admin. That ends our access to the shop. To ask about session data, email hello@bravostarsystems.com.

Store visitors do not have an account with us. Accessibility preferences, if any, are on the device you used to browse the store. Contact the store you visited for requests about that store’s customer data. You can also email us and we will confirm whether we hold anything — for these apps, that is typically nothing about a shopper.

Depending on where you live, you may have rights to access, correct, or delete personal information, or to appeal a decision. We will not discriminate against you for exercising those rights. We do not sell or share personal information as those terms are used in U.S. state privacy laws.

Children

Our apps are tools for merchants. They are not directed at children under 13, and we do not knowingly collect personal information from children.

International transfers

Bravostar Systems Inc. is based in the United States. Session data and site logs are processed in the United States. If you use a store from another country, the merchant of that store is responsible for its own cross-border notices.

Changes

We will update the effective date at the top of this page when we change this policy. If a change materially affects how an installed app handles merchant data, we will also surface it in the app listing or app documentation.

Contact

Bravostar Systems Inc.
Email: hello@bravostarsystems.com