Skip to content
AgreeFirstby Clever Booster

AgreeFirst: Terms & Conditions

Privacy policy

Last updated: November 7, 2026

AgreeFirst: Terms & Conditions (“AgreeFirst”, “we”) is a Shopify app made by CleverBooster. It shows a terms and conditions checkbox on a Shopify store and records the buyer’s consent on the store’s own orders. This policy explains what data the app handles.

Buyers (the store’s customers)

AgreeFirst does not collect or store any personal information about buyers on our servers. The checkbox runs in the buyer’s browser and talks only to Shopify:

  • When a buyer ticks the box, the date, time, time zone and terms version are saved as a cart attribute through Shopify and appear on the order under Additional details.
  • On the account sign-up form, the same record is added to the customer’s note in Shopify. On the contact form, it is included in the message the store receives.
  • To decide which checkboxes apply, the checkbox may read public product information (tags, vendor, type, collections) from the store itself.
  • No cookies, tracking pixels or analytics are added. Test mode uses the browser’s session storage only.

Our servers are never contacted from the storefront or checkout, so we do not receive buyers’ names, emails, addresses, payment details or IP addresses.

Merchants

To run inside the Shopify admin, the app keeps the minimum Shopify requires:

  • The store’s myshopify domain and the access session Shopify issues when the app is installed.
  • Access scopes are limited to read_locales (to offer the store’s languages), read_legal_policies (to warn when a linked policy page hasn’t been written yet; the policy text is checked and not stored) and write_validations (to turn strict mode on and off).
  • Settings and translations are saved in the store’s own Shopify metafields, not in our database. The plan is read from Shopify.

Sharing

We do not sell, rent or share data with advertisers, analytics companies or data brokers.

Retention and deletion

  • The session record is deleted when the app is uninstalled and when Shopify sends the shop redact request.
  • Shopify’s customer data and customer redact requests are answered right away: we hold no buyer data. Consent records stay in the merchant’s Shopify orders and follow the merchant’s own retention.

Security

All traffic to the app uses HTTPS. Access tokens are used only for the scopes listed above.

Changes

We will post updates on this page and change the date above.

Contact

Questions or requests: admin@cleverbooster.com.