Legal

Last updated: January 13, 2026

Information from Shopify

When a merchant installs Oshi: Loyalty & Rewards, the merchant authorizes the App to access certain Shopify data based on the permissions granted during installation. Depending on the permissions approved by the merchant, this may include:

• Customer data, such as email address, phone number, and customer tags, for the purpose of identifying reward eligibility and delivering rewards
• Order data, including order ID, timestamps, totals, line items, refunds, and chargebacks, limited to recent orders (e.g., the last 60 days) as permitted by Shopify
• Product and collection data, to display eligible products and configure rewards and redemptions
• Discount codes, to create, sync, and validate discount codes used for reward redemptions
• Shopify admin files, only as necessary to support app configuration or merchant-provided assets, if enabled

Oshi accesses this data solely to operate the rewards and loyalty features requested by the merchant and does not use Shopify data for unrelated advertising or cross-merchant marketing.

Merchants may request deletion of their store data by contacting privacy@oshi.tech.

---

Complete Privacy Policy

The following Privacy Policy applies to all use of the Oshi platform, including the Shopify App.

---

Oshi Technologies, Inc. ("Oshi," "we," "us," or "our") explains in this Privacy Policy how we collect, use, share, and protect information when you use the Oshi platform, including our websites, mobile apps, merchant tools, APIs, and related services (the "Platform").

This Privacy Policy is part of our Terms of Service.

1. Information We Collect

1.1 Information you provide

We collect the information you provide to us, which may include:

• Email address and/or phone number
• Support communications

We do not require or store names or physical addresses for standard customer accounts.

1.2 Information from participating merchants

If you opt in to a participating merchant's Bitcoin rewards or marketing program, we may receive from that merchant or its point-of-sale or ecommerce system (including Shopify):

• Your email address and/or phone number
• Purchase metadata needed to calculate rewards (such as order ID, timestamp, total, refunds, or chargebacks)

We only receive this data when you have opted in.

1.3 Rewards and account records

We maintain records related to the operation of the rewards program, including:

• Rewards earned, pending, claimed, reversed, redeemed, expired, or withdrawn
• Associated timestamps and internal identifiers

1.4 Lightning withdrawal data

If you withdraw Bitcoin rewards, we collect and process:

• The Lightning invoice or Lightning address you provide
• Withdrawal amount, timestamps, transaction identifiers, and success or failure status

1.5 Referral and attribution data

We use referral links, UTMs, cookies, and similar identifiers to track referrals and reward attribution. This may include click IDs, timestamps, and referral codes.

1.6 Automatically collected technical data

When you use the Platform, we and our infrastructure providers automatically collect basic log and device data, such as:

• IP address
• Device and browser/app information
• Operating system
• Timestamps and pages or endpoints accessed

This data is used for security, abuse prevention, debugging, and maintaining the Platform.

2. How We Use Information

We use information to:

• Operate and maintain the Platform
• Calculate, issue, reverse, and process rewards
• Process Lightning withdrawals
• Send account and rewards-related communications
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Improve reliability, performance, and security

3. SMS Communications

If you provide a phone number and opt in through a participating merchant, Oshi may send you automated or transactional SMS messages related to your rewards and account.

You may opt out at any time by replying STOP or following the instructions in the message. You may also contact us at privacy@oshi.tech.

Message and data rates may apply.

4. How We Share Information

We do not sell your personal information.

We share information only in the following situations:

4.1 Service providers

We share data with vendors that help operate the Platform, including:

• Customer.io (email delivery)
• Twilio (SMS delivery)
• Stripe (fiat payments and billing)
• Strike (Bitcoin Lightning withdrawals)

These providers may process information only to perform services for Oshi and as required by law. We may change providers over time.

4.2 Participating merchants

We may share with a merchant:

• Customer email or phone number
• Rewards activity related to that merchant's program

Merchants already possess the customer identifiers they receive. We do not share customer activity from other merchants without user authorization.

4.3 Legal and safety

We may disclose information to comply with law, protect users, prevent fraud, or defend legal claims.

4.4 Business transactions

If Oshi is involved in a merger, acquisition, financing, or asset sale, user information may be transferred as part of that transaction.

5. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Operate the Platform
• Maintain accurate reward and transaction records
• Comply with legal, tax, and accounting requirements
• Prevent fraud and resolve disputes

When an account is closed or a deletion request is made, we may delete or anonymize personal identifiers (such as email and phone number) while retaining transaction, reward, and ledger records in anonymized form as required for legal, audit, and compliance purposes.

6. Security

We use reasonable technical and organizational safeguards to protect your data. However, no system can be guaranteed to be completely secure.

7. Children's Privacy

Oshi is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

If we become aware that we have collected personal information from a child under 13 without appropriate parental consent, we will take reasonable steps to delete or anonymize that information.

8. Your Privacy Rights

Depending on where you live, you may have the right to request:

• Access to your personal information
• Correction of inaccurate data
• Deletion or anonymization of certain data

You can submit requests by emailing privacy@oshi.tech. We may need to verify your identity before fulfilling requests.

9. International Users

The Platform is operated from the United States. If you use Oshi from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our service providers operate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date when changes are made.

11. Contact

Email: privacy@oshi.tech

Mail:

Oshi Technologies, Inc.
621 E 6th St
Austin, TX 78701