Information processed
We process the installed shop domain, Shopify app authorization data, affiliate contact and program records, referral evidence, discount-code assignments, and the order identifiers, totals, currency, payment, fulfillment, cancellation, and refund status needed to calculate and review commissions. The app does not require or store customer names, addresses, phone numbers, or email addresses.
Purpose and legal basis
Information is used to provide affiliate tracking, commission review, payouts, security, support, and required Shopify app operations. The merchant controls its affiliate program and is responsible for the instructions it gives the app. The Shopify Web Pixel is declared for analytics and marketing attribution consent, does not collect customer identity fields, and is not used to sell or share personal information.
Sharing and retention
We do not sell personal information. Data is shared only with infrastructure providers needed to operate the service or when legally required. Merchant data is tenant-isolated. Shopify privacy webhooks are supported for access and deletion requests, and shop data is scheduled for deletion after uninstall as required by Shopify.
Security and choices
Connections use HTTPS in production, Shopify webhook signatures are verified, affiliate sessions are short-lived and revocable, and secrets are kept outside the source code. Shopify's pixel privacy controls determine when the Web Pixel may run based on the visitor's consent choices. Merchants can review or remove affiliate data from the app and may contact us for privacy requests.
Contact
Email support@zunavro.com with privacy or data requests.