Privacy Policy

Last updated: September 17, 2026. This policy describes how New Customer Notifier (“we”, “the app”) handles information when you install and use the app on BigCommerce.

Who we are

New Customer Notifier is a BigCommerce application that emails addresses you choose whenever a new customer is created on your store (store/customer/created). The service is operated at https://notify.monkeybutler.dev.

Information we collect

Store identity — BigCommerce store hash and related account identifiers needed for OAuth, webhooks, and (when enabled) Unified Billing.
OAuth access token — encrypted at rest; used only to call BigCommerce APIs required for install, webhook registration, customer enrichment, and uninstall cleanup.
Notification recipients — email addresses you enter in the app settings.
Webhook / job metadata — customer id, store hash, idempotency keys, and job status so we can send one email per new customer and retry safely. We do not retain full raw webhook payloads long-term.
Billing state — plan status, trial end, and subscription identifiers when BigCommerce Unified Billing is configured.
Operational logs — request and error logs from our host (may include store hash, job ids, and non-secret status codes). Logs are used for reliability and support.

How we use information

Deliver new-customer notification emails to your configured recipients
Authenticate Load / Uninstall callbacks and keep your install working
Enforce trial and paid plan rules when billing enforcement is enabled
Respond to support and privacy requests you send via the Feedback tool

We do not sell merchant or customer data. We do not use store customer lists for our own marketing.

Processors / subprocessors

BigCommerce — platform OAuth, webhooks, and billing
Hosting / database — application and Postgres (e.g. Railway or equivalent)
Email provider — transactional mail via the configured provider (EMAIL_MODE: typically Resend; optionally Postmark or Amazon SES)
Feedback service — optional in-app Feedback overlay / inbox when enabled

Those providers process data only as needed to run the service under their own terms.

Retention and deletion

While the app is installed we retain store settings, encrypted tokens, and job/idempotency records needed to operate notifications. On uninstall we delete the store row and cascaded settings/jobs and remove our webhook destination from the store when possible.

Email provider and host logs may retain limited metadata for a short operational window after uninstall. For privacy or deletion requests, use the in-app Feedback tool; we respond within 5 business days.

Security

Access tokens are encrypted at rest. Sessions use signed HTTP-only cookies. Webhook requests are signature-verified. Transmission uses HTTPS in production.

Feedback tool

Our apps may include an optional Feedback overlay (same feedback service used across our products). You choose when to use it; it is not always-on recording.

A screenshot is optional. We do not capture the screen unless you choose Add a screenshot.
If you add one, it stays on your device while you compose. We upload it only if you tap Send.
If you cancel, nothing is uploaded.
Submissions may include your note, annotation marks, page URL, basic device/browser context, and optional store hash metadata from this app.
Replies (if enabled) appear in the Feedback Messages view on the same browser that sent the feedback.

Children

The app is for business use on BigCommerce stores and is not directed at children.

Changes

We may update this policy when product or legal requirements change. Material changes will be reflected on this page; continued use after posting constitutes notice for marketplace purposes. Prefer counsel review before public listing if your jurisdiction requires it.