HIKO Social Login — Privacy Policy

Last updated: 15 June 2026

This Privacy Policy explains how HIKO Software (“HIKO”, “we”, “us”) collects, uses, stores, and shares information in connection with the Shopify app HIKO Social Login (the “App”). It applies to merchants who install the App and to shoppers who sign in through it on a merchant’s storefront.

Who we are

HIKO Software is a Taiwan-based company that builds Shopify apps that help merchants improve their online store and reach their customers. HIKO Social Login lets a merchant’s shoppers sign in to the store’s customer account using social providers (Google, Facebook, Apple, LINE, Kakao, Naver, and more), Google One Tap, or passwordless email — and, after verifying by email, enable a biometric passkey for faster returns.

For shoppers, the merchant whose store you are signing in to is the data controller of your customer account; HIKO acts as a processor that performs the sign-in on the merchant’s behalf. For the App’s own operation, HIKO is the controller of the limited data described below.

Information we collect

When you sign in through the App, we collect your email address — and only your email address. We use it solely to create or match your Shopify customer account and, for passwordless sign-in, to send a one-time verification code. We do not collect or store a password.

When you choose a social provider, you authenticate directly with that provider; we receive only your email address (and, where the provider returns it, your name) to identify and create your account. If you set up a biometric passkey, the biometric itself (fingerprint, face, or PIN) stays on your device and is never sent to or stored by us.

We use cookies and browser storage only to operate the sign-in widget — to keep you within the sign-in flow, remember your language preference, and enable the widget’s features. We do not use them for advertising or cross-site tracking.

The App is not directed to children under 13. Shoppers under 13 should not register or send us any information. If we learn that we have collected information from a child under 13 without verifiable parental consent, we will delete it as quickly as possible.

How we use your information

Our primary purpose in collecting your email is to provide the services you or our merchant customers request — namely, to authenticate you and create or match a Shopify customer account, deliver passwordless and passkey sign-in, and operate, secure, and improve the App. We do not use your personal information for any unrelated purpose.

How we share your information

We do not rent, sell, or share personal information about you with other people or companies for their own marketing. We share information only as needed to run the service:

Shopify — to create and sign you in to your customer account and to store the merchant’s configuration; your use of the store is also governed by Shopify’s and the merchant’s own privacy policies.
The identity provider you choose (e.g. Google, Apple, Facebook, LINE) — you authenticate directly with them; their handling of your data is governed by their own privacy policies.
Service sub-processors that host and operate the App (cloud infrastructure and email delivery for one-time codes), under confidentiality obligations and only to the extent needed to provide the service.
Legal — where required by law, or to protect the rights, safety, or property of HIKO, our merchants, or shoppers.

Where your information is stored

Personal data processed by the App is stored on managed cloud infrastructure in the United States (Oracle Cloud Infrastructure, US Phoenix region). We apply technical and organizational safeguards, including encryption of credentials at rest and in transit, to protect it against unauthorized access, alteration, or disclosure.

Data retention

We retain personal data only as long as needed to provide the service and for the purposes described above, then delete or anonymize it. One-time email codes are short-lived; login-analytics records are kept for a limited window to power the merchant’s dashboard. When a merchant uninstalls the App, the associated configuration and shopper data are deleted in line with Shopify’s app data-handling requirements.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent at any time.

Shoppers can review, update, or delete their customer profile by signing in to the store’s account page (for example, your store’s …/account/login).
For any request about data held by the App — or if you believe a child’s data was collected — contact us at the address below and we will respond as required by applicable law.

International transfers

If you access the App from outside the United States, your information may be transferred to and processed in the US. We take steps to ensure such transfers have an appropriate legal basis and an adequate level of protection.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notice within the App.

Contact

Questions, comments, and requests regarding this Privacy Policy or your data are welcome and can be sent to support@hikosoft.com.