Privacy Policy
Effective Date: January 2025
Last Updated: January 2025
1. Introduction
Revara Corp ("we," "our," or "us") operates the Revara Affiliate Marketing App ("the App") for Shopify merchants.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our
Shopify application.
We are committed to protecting your privacy and ensuring transparency about our data practices. This policy
applies to all users of our App, including Shopify merchants, their customers, and affiliates.
2. Information We Collect
2.1 Merchant Information
When you install and use our App, we collect:
- Shop Information: Shop domain, email address, business name
- Configuration Data: Commission rates, affiliate channel preferences, payout settings
- Authentication Data: Shopify access tokens (securely stored and encrypted)
- App Usage Data: Feature usage, settings configurations, dashboard interactions
2.2 Order and Transaction Data
Through Shopify's webhook system, we receive:
- Order Information: Order ID, total price, currency, financial status, fulfillment status
- Discount Codes: Applied discount codes and their values
- Line Items: Product properties related to referral tracking
- Cart Attributes: Custom attributes used for affiliate attribution
Important: We do not collect or store personally identifiable customer information such as names,
addresses, phone numbers, or payment details. Customer data remains in your Shopify store.
2.3 Affiliate and Referral Data
- Affiliate Profiles: Name, email address, commission rates, status
- Referral Codes: Custom referral codes, landing URLs, discount associations
- Attribution Data: Referral source tracking, commission calculations
- Visit Tracking: Referral link clicks and visitor analytics (anonymized)
2.4 Cookies and Tracking
We use cookies and similar technologies for:
- Referral Attribution: 30-day tracking cookies to attribute sales to affiliates
- Session Management: Secure app authentication within Shopify
- Analytics: Understanding app usage patterns (anonymized)
3. How We Use Your Information
3.1 Primary Purposes
- Affiliate Management: Creating and managing affiliate programs
- Commission Tracking: Calculating and tracking affiliate commissions
- Attribution Analytics: Providing insights on referral performance
- App Functionality: Delivering core features and maintaining the service
3.2 Communication
- Service updates and important announcements
- Technical support and customer service
- Security notifications and account alerts
3.3 Business Analytics
- Improving app performance and user experience
- Developing new features and functionality
- Analyzing usage patterns (in aggregate, anonymized form)
4. Data Sharing and Disclosure
4.1 We Do Not Sell Your Data
We do not sell, trade, or rent your personal information to third parties.
4.2 Limited Sharing
We may share information only in these circumstances:
- Service Providers: Trusted third-party services that help us operate our App (hosting,
analytics, support)
- Legal Requirements: When required by law, court order, or government request
- Business Transfer: In connection with a merger, acquisition, or sale of assets
- Security Protection: To protect our rights, property, or safety, or that of our users
4.3 Shopify Integration
Our App operates within Shopify's ecosystem and follows Shopify's Partner Program requirements. We access your
Shopify data only as necessary to provide our affiliate marketing services.
5. Data Security
5.1 Security Measures
- Encryption: All data transmitted using industry-standard TLS encryption
- Access Controls: Strict access controls and authentication requirements
- Secure Hosting: Data hosted on secure cloud infrastructure in the United States
- Regular Audits: Ongoing security assessments and vulnerability testing
5.2 Data Retention
| Data Type |
Retention Period |
Purpose |
| Merchant Account Data |
Duration of subscription + 30 days |
Service provision and support |
| Order and Commission Data |
7 years |
Financial records and tax compliance |
| Referral Tracking Cookies |
30 days |
Attribution tracking |
| Analytics Data |
2 years (anonymized) |
Product improvement |
6. Your Privacy Rights
6.1 Access and Control
You have the right to:
- Access: Request copies of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (subject to legal requirements)
- Portability: Request your data in a portable format
- Restriction: Request limitation of data processing
6.2 GDPR Compliance
For users in the European Union, we comply with the General Data Protection Regulation (GDPR). Our lawful basis
for processing includes:
- Contract Performance: Providing affiliate marketing services
- Legitimate Interests: Business analytics and fraud prevention
- Consent: Where explicitly obtained for specific purposes
6.3 CCPA Compliance
For California residents, we comply with the California Consumer Privacy Act (CCPA). You have additional rights
including the right to know about data collection and the right to opt-out of data selling (which we don't engage
in).
7. International Data Transfers
Our services are hosted in the United States. If you access our App from outside the United States, your data
will be transferred to and processed in the United States. We ensure appropriate safeguards are in place for
international transfers.
8. Children's Privacy
Our App is not intended for use by individuals under 18 years of age. We do not knowingly collect personal
information from children under 18. If we become aware that we have collected such information, we will take steps
to delete it promptly.
9. Third-Party Services
Our App may integrate with third-party services for functionality such as:
- Shopify's API and webhook systems
- Cloud hosting and database services
- Analytics and monitoring tools
These services have their own privacy policies, and we encourage you to review them.
10. Privacy Webhooks and Data Requests
In compliance with Shopify's privacy requirements, we have implemented mandatory privacy webhooks to handle:
- Data Requests: Providing customer data when requested
- Data Redaction: Removing customer personal data while preserving business records
- Shop Redaction: Complete data deletion when merchants uninstall our App
11. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We
will notify you of material changes by:
- Updating the "Last Updated" date at the top of this policy
- Sending notifications through the App
- Email notifications for significant changes
Your continued use of the App after changes become effective constitutes acceptance of the updated policy.
© 2025 Revara Corp. All rights reserved.