HIKO Social Login Plus — Privacy Policy

Last updated: 12 June 2026

This Privacy Policy explains how HIKO Software (“HIKO”, “we”, “us”) collects, uses, stores, and shares information in connection with the Shopify app HIKO Social Login Plus (the “App”). It applies to merchants who install the App and to shoppers who sign in through it on a merchant’s storefront.

Who we are

HIKO Software is a Taiwan-based company that provides Shopify apps that help merchants improve their online store and reach their target audience. HIKO Social Login Plus lets a merchant’s shoppers sign in to the store’s customer account using social providers (Google, Facebook, Apple, LINE, Kakao, Naver, and more), Google One Tap, or passwordless email — and, after verifying by email, enable a biometric passkey for faster returns.

For shoppers, the merchant whose store you are signing in to is the data controller of your customer account; HIKO acts as a processor that performs the sign-in on the merchant’s behalf. For the App’s own operation, HIKO is the controller of the limited data described below.

Information we collect

When you sign in through the App, we collect your email address — and only your email address. We use it solely to create or match your Shopify customer account and, for passwordless sign-in, to send a one-time verification code. We do not collect or store a password.

When you choose a social provider (Google, Facebook, Apple, LINE, Kakao, Naver, and others), you authenticate directly with that provider; we receive your email from them to identify your account. If you set up a biometric passkey, the biometric itself (fingerprint, face, or PIN) stays on your device and is never sent to or stored by us.

We use cookies and browser storage only to operate the sign-in widget — to keep you in the sign-in flow, remember your language, and enable its features.

The App is not directed to children under 13. Shoppers under 13 should not register; if we learn we have collected information from a child under 13 without parental consent, we will delete it.

How we use your information

Our primary purpose in collecting your email is to provide the services you or our merchant customers request — namely, to authenticate you and create or match a Shopify customer account, deliver passwordless and passkey sign-in, and operate, secure, and improve the App.

How we share your information

We do not rent, sell, or share personal information about you with other people or companies for their own marketing. We share information only as needed to run the service:

Where your information is stored

Personal data processed by the App is stored on managed cloud infrastructure in the United States (Oracle Cloud Infrastructure, US Phoenix region). We apply technical and organizational safeguards, including encryption of credentials at rest and in transit, to protect it.

Data retention

We retain personal data only as long as needed to provide the service and for the purposes above, then delete or anonymize it. One-time email codes are short-lived; login-analytics records are kept for a limited window to power the merchant’s dashboard. When a merchant uninstalls the App, the associated configuration and shopper data are deleted in line with Shopify’s app data-handling requirements.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent.

International transfers

If you access the App from outside the United States, your information may be transferred to and processed in the US. We take steps to ensure such transfers have an appropriate legal basis and protection.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notice within the App.

Contact

Questions about this policy or your data can be sent to support@hikosoft.com.