Skip to content

Privacy Policy

CZ Names (Skloňování jmen)

Effective Date: March 25, 2026 Last Updated: March 25, 2026

Developer: Sounds Good Agency s.r.o. Contact Email: integrace@soundsgood.agency


This Privacy Policy describes how Sounds Good Agency s.r.o. (“we”, “us”, “our”) collects, uses, stores, and protects information when you use the CZ Names application (“the App”). This policy applies to all merchants (“you”, “Merchant”) who install and use the App through the Shopify App Store, as well as to end customers (“Customers”) of those merchants whose data may be processed through the App.

By installing and using the App, you agree to the collection and use of information in accordance with this Privacy Policy.


The App accesses and processes the following customer information from Shopify:

DataPurpose
Customer first nameDeclined into the 5th grammatical case (vocative) for personalized addressing
Customer last nameDeclined into the vocative form for formal addressing

The App generates and stores the following data as Shopify customer metafields in the czech-names-app namespace:

Metafield KeyContent
addressingDeclined first name (vocative form)
last-name-addressingDeclined last name (vocative form)
genderLinguistic gender (male, female, or unknown)

When you install and configure the App, we collect:

  • Shopify store domain (used as your unique identifier)
  • Shopify OAuth access token (for API authentication)
  • Granted API permission scopes
  • Billing plan selection and subscription status

If you enable the optional Klaviyo integration, the App writes the following properties to Klaviyo customer profiles:

  • Czech addressing (declined first name)
  • Czech last name (declined last name)
  • Gender (linguistic gender)

This requires you to provide your Klaviyo API key in the App settings. The API key is stored securely and used solely for syncing declension data.


PurposeData Used
Name declensionCustomer first and last name
Metafield storageDeclined names and gender written to Shopify metafields
Klaviyo sync (optional)Declined names and gender synced to Klaviyo profiles
App authenticationOAuth tokens, session data, shop domain
Billing managementShop domain, subscription plan

We process customer names solely for the purpose of generating declined (vocative) forms. We do not use customer data for marketing, analytics, profiling, or any purpose other than the core declension functionality.


The primary output of the App — declined names and gender — is stored as Shopify customer metafields within your Shopify store. This data is governed by Shopify’s own privacy practices and infrastructure.

Application data (merchant account, sessions, configuration) is stored in Google Firebase, located in the EU region.

Name declension is performed using the sklonovani-jmen.cz API. Customer first and last names are sent to this service for grammatical processing. No other customer data is shared with this service.


We do not sell, rent, or trade any personal information to third parties.

Data is shared only with the following service providers, strictly for the purposes described:

ProviderPurposeData Shared
Shopify Inc.E-commerce platform, billingMetafields, API calls
Google Cloud / FirebaseApplication hosting and databaseMerchant account data, sessions
sklonovani-jmen.czCzech name declension APICustomer first and last names
Klaviyo (optional, merchant-enabled)Email marketing platformDeclined names, gender

Data TypeRetention Period
Customer metafieldsStored in Shopify; persist until deleted by merchant or Shopify
Merchant account dataDuration of app installation + 30-day grace period
OAuth sessionsDeleted immediately on app uninstall
Klaviyo profile propertiesManaged by Klaviyo; persist according to Klaviyo’s retention policies

When you uninstall the App:

  • OAuth sessions and access tokens are deleted immediately
  • Customer metafields remain in Shopify (managed by you)
  • Klaviyo profile properties remain in Klaviyo (managed by you)

We act as a data processor on behalf of the Merchant (data controller) for customer data. We process customer names solely on the Merchant’s instruction (by installing and configuring the App).

We respond to Shopify’s mandatory GDPR webhooks:

WebhookAction
customers/data_requestWe compile and provide all stored data for the specified customer
customers/redactWe delete all stored data associated with the specified customer
shop/redactWe delete all stored data for the entire shop

As a merchant, you have the right to:

End customers should contact the merchant (store owner) directly regarding their personal data. Merchants can relay requests to us if needed. We respond to verified data subject requests within 30 days.


  • Encryption in Transit: All data transmitted between systems uses HTTPS/TLS encryption
  • Encryption at Rest: Firebase provides automatic encryption at rest
  • OAuth 2.0: Shopify app authentication follows industry-standard OAuth 2.0 protocol
  • Webhook Verification: Shopify webhook payloads verified using HMAC signatures
  • Access Control: Production systems restricted to authorized development team members

The App is designed for business use by Shopify merchants and is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.


We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Last Updated” date at the top of this policy. Continued use of the App after changes constitutes acceptance of the updated policy.


For any questions, concerns, or requests regarding this Privacy Policy or your data:

Developer: Sounds Good Agency s.r.o. Email: integrace@soundsgood.agency

For GDPR-related requests:

  • Merchants: Contact us directly at integrace@soundsgood.agency
  • End customers: Contact the merchant (store owner) who installed the App

This Privacy Policy is governed by the laws of the Czech Republic and the European Union’s General Data Protection Regulation (GDPR). For disputes, the courts of the Czech Republic shall have jurisdiction.


This Privacy Policy was last reviewed and updated on March 25, 2026.