Last updated: 28 October 2026

Stride Toolkit is provided by Stride Nordic AB, Sweden (“Stride”, “we”, “us” or “our”).

This Privacy Policy explains how we process personal data when merchants install and use Stride Toolkit, when customers interact with its features in a Shopify store, and when someone contacts us for support or privacy assistance.

For privacy questions or requests, contact support@stride.se.

1. Our role and the merchant’s role

When we process customer information to provide features configured by a Shopify merchant, the merchant generally acts as the data controller and Stride acts as a data processor on the merchant’s behalf. The merchant determines why customer information is used and how Stride Toolkit is configured.

For information we use to manage our business relationship with merchants, administer subscriptions, provide support, protect our services or meet legal obligations, Stride acts as a data controller.

If you are a customer of a store using Stride Toolkit, the store’s privacy policy also applies. Please contact that merchant first about its use of your personal data.

2. Information we process

The information processed depends on the features the merchant enables, the app permissions granted through Shopify, and the information available during checkout. Not every installation processes every category below.

Stride Toolkit does not maintain a separate customer database or store buyer form submissions in its application database. Customer information is processed as needed to provide merchant-configured features. Form answers are saved as attributes in Shopify. Personal data may nevertheless be present in merchant configurations, privacy-request records, support correspondence and technical infrastructure records, as described below.

Merchant and store information

We may process store identifiers, store domains, merchant contact information, installation status, authentication and connection information, and relevant store settings.

App configurations

We store configurations created by merchants, including checkout rules, conditions, forms, blocks, translations, schedules, branding settings, and references to Shopify resources.

These configurations may contain personal data if a merchant includes it in a condition, text field, default value or other setting.

Customer and business information

Where needed for enabled features, we may process customer identifiers, contact information, login status, customer tags, order count, spending information, and business-to-business information such as company and company location.

We may also process merchant-selected metafield values associated with supported Shopify resources.

Cart and checkout information

We may process product and variant information, collections, quantities, prices, cart totals, currency, selling plans, cart attributes, shipping information, available delivery and payment methods, purchase order information, and other checkout data needed to evaluate the merchant’s configurations.

Form answers and order attributes

Customers may provide information through forms configured by the merchant. Supported form answers and mapped values are saved as attributes in Shopify and may become part of the merchant’s order records.

Stride Toolkit does not maintain a separate database table of buyer form submissions. However, personal information may still appear in merchant configurations, support correspondence or infrastructure records.

Subscription information

We process the selected plan, subscription and trial status, relevant billing dates, and identifiers needed to verify access to app features.

Subscriptions are billed through Shopify. We do not collect or store payment card numbers or card security codes for app subscription payments.

Technical and support information

We may process request and error information, timestamps, session information, network identifiers such as IP addresses, and information provided in support or privacy correspondence.

3. How we use information

We use information to:

• Provide checkout rules and evaluate merchant-defined conditions.
• Customize supported payment, delivery and checkout behaviour.
• Display forms, messages, product offers and other checkout content.
• Populate supported fields from merchant-selected Shopify data.
• Save supported answers and values as Shopify attributes.
• Apply and manage checkout branding.
• Authenticate access and keep each merchant’s app data separate.
• Verify subscriptions and feature access.
• Investigate errors, maintain security and provide support.
• Process privacy requests and meet applicable legal obligations.

We do not sell personal data or use customer information processed through the app for our own targeted advertising.

4. Legal bases for processing

Where Stride acts as a controller and applicable law requires a legal basis, we rely on:

• Contractual necessity: to provide services requested by an individual merchant or account holder.
• Legitimate interests: to administer business relationships, provide support, maintain and secure the app, and prevent misuse, where those interests are not overridden by individuals’ rights.
• Legal obligations: to meet applicable regulatory, accounting and privacy requirements.
• Consent: where required for a particular activity. Consent may be withdrawn without affecting processing that occurred lawfully before withdrawal.

Where we act as a processor, we process customer information on the merchant’s instructions. The merchant is responsible for establishing an appropriate legal basis and providing relevant notices to customers.

5. Sharing information

We share information only where needed to provide the service or for the purposes described in this policy. Recipients may include:

• Shopify, which operates the merchant’s store, checkout, order records and app billing.
• Gadget, which hosts and operates the app’s backend infrastructure.
• Infrastructure and communications providers used to host services, deliver operational emails or support service administration.
• Professional advisers and public authorities, where reasonably necessary to protect legal rights or comply with applicable law.

Information may also be disclosed as part of a merger, acquisition or business transfer, subject to applicable privacy obligations.

Gadget identifies its subprocessors in its Privacy Policy.

6. Hosting and international transfers

Stride is based in Sweden. Personal data processed through Stride Toolkit may be processed outside Sweden and the European Economic Area.

Gadget has confirmed that the app’s production database, file storage, logs and background jobs are hosted on Google Cloud in the United States, in the us-central1 region. Database backups are stored in the same region. Gadget’s built-in email delivery uses Amazon Simple Email Service in the United States.

Gadget is a Canadian company. Authorized support or operational access may involve processing from other locations, subject to applicable contractual and confidentiality obligations.

Where international transfers require safeguards, these may include applicable adequacy decisions or contractual safeguards. Gadget’s Data Processing Addendum provides for EU Standard Contractual Clauses, together with the UK Addendum and Swiss modifications where applicable.

Further information is available in Gadget’s Privacy Policy and Data Processing Addendum. You may contact us to request information about safeguards relevant to your data.

7. Retention and deletion

We retain personal data for as long as needed for the purposes described in this policy, taking account of the service relationship, privacy requests, security needs, applicable legal obligations and the establishment or defence of legal claims.

Merchant configurations and subscription records

App configurations are retained while needed to provide the service. Cancelling a subscription does not itself delete saved configurations.

Following uninstallation, we process Shopify’s applicable shop-erasure requests. Reinstallation, unresolved privacy requests or legal obligations may require additional review before deletion is completed.

Customer privacy requests

We review relevant app-held information and configuration copies when responding to customer access or deletion requests. When a privacy case is completed, identifying request payloads are removed from the case record; limited workflow metadata may remain to document how the request was handled.

Infrastructure retention

Gadget has confirmed the following retention periods for our current Pro hosting plan:

Application logs: 14 days

Operational data: 14 days

Completed background-action payloads and results: 1 day after completion

Failed background-action payloads and results: 3 days

Database backups: Rolling 7-day window

Deleting a record from the active database does not immediately remove historical backup copies. Deleted records age out of backups within the rolling seven-day window. Logs and background-action history expire according to their respective schedules.

Where earlier removal of specific personal data is required, we coordinate with Gadget through its privacy-request process. A database restoration can restore information that existed at the selected recovery point, including records deleted afterwards; deletion requests must therefore also be considered when handling a restoration.

These infrastructure periods do not determine the retention of information held independently by Shopify, merchant-controlled exports or support email providers.

Support correspondence

We retain support correspondence as needed to resolve enquiries, manage ongoing issues and meet applicable legal obligations. Retention depends on the nature of the correspondence and whether further follow-up is required.

Information held by Shopify or merchants

Deleting app data does not automatically delete merchant-owned Shopify orders, customer records or previously saved order attributes. The merchant and Shopify manage those records under their applicable policies and obligations.

8. Security

We use access controls, shop-specific data restrictions and other technical and organizational measures intended to protect personal data from unauthorized access, disclosure, alteration or loss.

Access is limited according to operational needs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Merchants should avoid placing passwords, payment card details, government identification numbers or other sensitive information in app configurations, forms or support messages.

9. Cookies and similar technologies

Stride Toolkit and the platforms supporting it may use cookies, session identifiers, tokens and similar technologies needed for authentication, security and operation.

Shopify’s storefront and checkout technologies, and technologies used on Stride’s website, may be subject to separate privacy and cookie notices. This policy concerns Stride Toolkit’s processing.

10. Your rights and privacy requests

Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, restriction of, or portability of your personal data. You may also have the right to object to certain processing or withdraw consent where processing relies on consent.

To contact us, email support@stride.se with the subject “Stride Toolkit privacy request”. Include the relevant store domain and describe your request. Please do not include passwords, payment card information or unnecessary sensitive information.

We may need to verify your identity or authority before fulfilling a request.

If your request concerns a purchase or checkout interaction with a merchant, contact that merchant first. Where Stride processes information on its behalf, we assist the merchant in responding rather than independently deciding how its customer information should be handled.

You may lodge a complaint with your local data protection authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY): www.imy.se.

11. Merchant-configured checkout decisions

Merchants can configure rules that automatically affect checkout, such as which payment or delivery methods appear or whether specified checkout requirements have been met.

These outcomes depend on the merchant’s settings and available Shopify data. Stride does not independently determine the merchant’s purchasing policies. Contact the merchant with questions about an outcome or to request assistance.

12. Changes to this policy

We may update this policy to reflect changes to the app, our service providers or applicable requirements. The latest version will be published on this page with an updated revision date. Where required, we will provide additional notice of material changes.

13. Contact

Stride Nordic AB
Sweden
App: Stride Toolkit
Privacy and support: support@stride.se
Website: stride.se