Privacy Policy
Last updated 12 October 2026 · GiftBow is published by Found.
The short version. GiftBow stores your store's settings, the gift messages your shoppers write, and a list of the orders that bought gift wrapping. It never sees card details. It does not collect shopper email addresses or postal addresses. It keeps the buyer's name from the order, and any To and From names the shopper typed, next to the gift note so you can match the card to the parcel. Everything is scoped to your store, and nothing is ever sold or shared for advertising.
Who this covers
This policy covers GiftBow (the "app"), an application for OpoShop stores published by Found. It applies to the merchant who installs GiftBow and to the shoppers who use the gift-wrap toggle on that merchant's storefront.
Merchant store data
When you install GiftBow you authorise it through OpoShop's OAuth. GiftBow receives an access token scoped to your store and uses it only to:
- read your store's name, subdomain and currency;
- create and maintain the hidden gift products it made itself: the gift-wrap product, and one for each wrap style or paid add-on you set up. These are the only products GiftBow ever writes to;
- read your collections and product names so you can choose what is giftable;
- read your orders, to find the ones that bought gift wrapping and to read the gift message on them.
GiftBow never places, cancels or fulfils an order, never modifies a product it did not create, and never emails your customers.
Buyer-written gift messages
When a shopper turns on the gift toggle, GiftBow stores what they type: the gift message and, if you have enabled them, the "To" and "From" lines. These are stored against the shopper's cart while they are shopping. Because OpoShop carries the note onto the order itself, they also appear on the order in your own OpoShop admin. If you have switched them on, the same applies to a gift receipt request, a deliver by date and a short delivery note.
GiftBow does not store a shopper's email address, postal address, phone number, IP address or payment details. For each order that bought gift wrapping, GiftBow keeps the buyer's name as it appears on the order, the order number, and the names of the items in it, alongside the gift note, so you can match the card to the parcel.
Gift messages attached to carts that never become an order are automatically deleted after 60 days.
Payment data
GiftBow never touches money. The gift-wrap fee is a normal product line on the order, charged by your store through OpoShop's own checkout. GiftBow holds no card details, no balance, no payment credentials, and takes no cut.
Where data is stored
GiftBow's data lives in its own database, hosted on MongoDB Atlas, and the app runs on Fly.io. Every record is scoped to a single store: one store cannot read another store's settings, queue or gift messages.
Analytics
GiftBow records anonymous product events (for example "settings saved" or "gift marked wrapped") through PostHog so we can tell which parts of the app are used. These events are keyed to a store identifier, never to a shopper, and carry no personal data and no message content.
So that you can see the gift switch is really showing, the storefront widget tells GiftBow when it has appeared on your store. That signal contains your store identifier and whether it was a product page or the cart page. It contains nothing about the shopper, and GiftBow keeps only the time of the most recent one.
If you limit gift wrapping to some of your products, the widget asks GiftBow which of the products in a shopper's cart can be gift wrapped. That request contains your store identifier and product identifiers only. It contains nothing about the shopper and GiftBow does not keep it.
Sharing
GiftBow does not sell data and does not share it for advertising. The only third parties involved are the infrastructure providers named above (Fly.io, MongoDB Atlas, PostHog) and OpoShop itself, which is where your store data comes from and goes back to.
Retention and deletion
- Uninstalling GiftBow pauses your store; your settings and queue are kept so that reinstalling restores them.
- Unconverted cart gift messages are deleted automatically after 60 days.
- To have your store's data deleted permanently, email us and we will remove it.
- The hidden gift products GiftBow created stay on your store after uninstall. They are yours, and you can delete them from OpoShop whenever you like.
Your rights
You can request a copy of the data GiftBow holds for your store, ask for corrections, or ask for deletion, by emailing us. We respond to requests within 30 days.
Changes
If this policy changes materially we will update the date at the top of this page and, for anything that affects how data is used, note it in the app's What's New page.