Information processed
We process the installed shop domain, Shopify app authorization data, affiliate contact and program records, referral evidence, discount-code assignments, order identifiers and financial or fulfillment status needed to calculate and review commissions. Customer email addresses are stored only as one-way hashes for anti-fraud checks.
Purpose and legal basis
Information is used to provide affiliate tracking, commission review, payouts, security, support, and required Shopify app operations. The merchant controls its affiliate program and is responsible for the instructions it gives the app.
Sharing and retention
We do not sell personal information. Data is shared only with infrastructure providers needed to operate the service or when legally required. Merchant data is tenant-isolated. Shopify privacy webhooks are supported for access and deletion requests, and shop data is scheduled for deletion after uninstall as required by Shopify.
Security and choices
Connections use HTTPS in production, Shopify webhook signatures are verified, affiliate sessions are short-lived and revocable, and secrets are kept outside the source code. Merchants can review or remove affiliate data from the app and may contact us for privacy requests.
Contact
Email support@zunavro.com with privacy or data requests.