Privacy Policy

1. Who this policy covers

This policy covers personal data we process on behalf of merchants who install our applications, as well as data relating to merchant staff who administer those applications.

When a merchant installs our app, the merchant is the data controller for their customers' personal data and Dealkhir acts as a data processor, handling that data only to provide the service.

2. Information we collect

Merchant account data: the store domain and the credentials (keys) that connect the store to a Dealkhir account, plus configuration you set such as cashback rules and display texts.

Merchant staff data: when you install our Shopify app, Shopify provides session information that may include the installing user's name and email, used solely to authenticate the app session.

E-commerce order data: for each eligible order we process the order number, the order total amount, and the order's financial (payment) status. We use these to calculate the donation and to link a customer's chosen charity project to the correct order.

Information we do NOT collect: our applications do not read or store customer names, email addresses, phone numbers, or shipping/billing addresses. We deliberately limit ourselves to the minimum data needed to calculate and record a donation.

3. How we use information

To calculate the solidarity cashback (donation) amount due on an eligible order based on the merchant's configured rules.

To record the donation transaction and link it to the charity project the customer selects on the order confirmation (thank-you) page.

To authenticate the application and secure communication between the application and the Dealkhir platform.

We use this data only for the purposes described above and do not sell personal data or use it for advertising.

4. How information is shared

Order and donation data is transmitted to the Dealkhir platform, where the donation is recorded under the merchant's account and allocated to the selected charity project.

We may use trusted service providers (such as hosting and infrastructure providers) who process data on our behalf under appropriate agreements.

We may disclose information where required by law or to protect the rights, safety, and security of our users and the public.

5. Data retention and deletion

We retain merchant and order-related data only while the application is installed and active.

When a merchant uninstalls the app, all associated store, session, and queued data is deleted within 48 hours, in accordance with Shopify's mandatory shop/redact request.

Authentication tokens are short-lived and expire automatically (within 24 hours).

We respond to Shopify's mandatory customers/data_request and customers/redact requests. Because we do not store customer personal data, these requests are acknowledged and require no data extraction or erasure on our side.

6. Data security

All data exchanged between merchants, customers' browsers, and our services is encrypted in transit using HTTPS/TLS.

We apply appropriate technical and organizational measures, including access controls, to protect data against unauthorized access, alteration, or disclosure.

7. Your rights

Depending on your location, you may have rights to access, correct, or delete personal data, and to object to or restrict certain processing.

Because customer personal data is controlled by the merchant, customers should direct such requests to the merchant operating the store. Merchants can contact us to assist with any request.

You can exercise rights or ask questions by contacting us using the details below.

8. International data transfers

Data may be processed in countries other than the one in which you reside. Where this occurs, we take steps to ensure an appropriate level of protection for the data.

9. Children's privacy

Our services are intended for merchants and their customers and are not directed at children. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.

11. Contact us

For any question about this Privacy Policy or our data practices, contact us at contact@dealkhir.com.