Privacy

App: Holdback: Discount Targeting, operated by Catalyst Systems LLC (doing business as Holdback)

Website: holdbackapp.com

Last updated: October 13, 2026

What the app reads

When you install Holdback, it reads your store's orders from the last 60 days (longer if Shopify approves extended order access). For each order it reads:

• the subtotal, total discount and discount codes used;
• the order date;
• the customer's Shopify ID;
• the customer's order number and visit counts that Shopify attaches to the order;
• the product type of each item.

Holdback never reads customer names, email addresses, phone numbers or addresses.

Why

• To show you how much discount your store gave out, to which kinds of orders, and an estimate of how much went to orders that would have happened anyway.
• To run the campaigns you start. In a campaign, Holdback randomly holds back a small group of customers from your offer so the result shows what the discount actually changed.

What we keep

• Order rows are not stored.
• Per customer: we keep one encrypted summary for each customer in the window. It holds their Shopify ID, the group they fall in, and numbers worked out from their orders, such as order count and discount used.
• Per campaign: we keep which customers were offered the discount and which were held back.
• Audit page: we keep the totals shown on your audit page.

What we change in your store

Only when you start a campaign:

• we add the tag holdback:offer to the customers who get your offer;
• we create a customer segment from that tag;
• we create a discount code only that segment can use.

When you end a campaign, we remove the tags and switch the code off.

Sharing

• We do not sell or share your data.
• Holdback may improve its models using patterns learned across stores. Stores share what the model learned, never each other's data.

Deletion

• When you uninstall: we delete the per-customer summaries and campaign assignments immediately.
• 48 hours later, when Shopify sends its shop deletion request: we delete everything else, including audit results, campaign history and settings.
• Shopify customer data requests: we answer them as required.
• Tags already added to customers stay in your store after uninstall, because uninstalling removes our access. You can remove them in Shopify admin by filtering customers by the tag.

Security

All data is encrypted in transit (HTTPS). Per-customer summaries are encrypted in the app before storage, and the database is encrypted at rest.

Contact

support@holdbackapp.com