Privacy Policy

AppHero ("we", "us", or "our") develops Shopify applications that help merchants improve their online stores. This Privacy Policy explains how we collect, use, and protect personal information when merchants use our apps and services.

Our Data Processing Addendum (DPA) is available at:
https://assets.apphero.co/DPA.html

By installing or using an AppHero application, you agree to the collection and use of information in accordance with this policy.

Information We Collect

When you install or use one of our Shopify apps, we may receive certain information from Shopify and from your store in order to provide the app's functionality.

This information may include:

• Store information (store domain, store owner contact information)
• Customer information (such as name or email)
• Order information
• Product information
• Store configuration settings

We only access data that is necessary for the functionality of the app.

How We Use Information

We use the collected information to:

• Provide and operate our apps
• Display promotions, campaigns, or features configured by the merchant
• Provide customer support
• Improve app performance and reliability
• Maintain security and prevent abuse

We do not sell merchant or customer data.

Shopify Platform

Our apps integrate with Shopify and receive data through Shopify APIs in accordance with Shopify’s platform policies.

Merchants control what data their store shares with installed apps through Shopify's permission system.

Data Storage and Security

AppHero stores application data using secure cloud infrastructure providers.

We implement reasonable technical and organizational safeguards designed to protect personal information, including:

• Encrypted data transmission (HTTPS / TLS)
• Secure cloud hosting infrastructure
• Access control and internal authentication systems
• Security monitoring and logging

Sub-Processors

To operate our services, we rely on trusted infrastructure providers.

Current sub-processors include:

• Amazon Web Services (AWS) – Cloud hosting and infrastructure

These providers are contractually required to maintain appropriate security and confidentiality measures.

International Data Transfers

AppHero may process or store data in countries outside the European Economic Area (EEA), including the United States.

Where applicable, we rely on appropriate safeguards implemented by our service providers and applicable data protection laws.

Data Retention

We retain store data only for as long as necessary to provide the services.

If a merchant uninstalls an AppHero app:

• Our access to Shopify store data is immediately revoked
• Stored store data is scheduled for deletion from our systems

Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, or delete your data.

If you would like to exercise these rights, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes.

Contact

If you have questions about this Privacy Policy or our data practices, please contact us at:

hello@apphero.co