Legal

Privacy policy

Effective 7 September 2026 · Hatzlacha Management LLC · Data processing agreement · Security policy

Affiliate Loop is a Shopify app that runs affiliate and creator programmes for online stores. This policy explains what the app stores, why it needs each piece, who else it reaches, and how to have it erased. It covers the app only — the merchant whose store you bought from, or applied to as an affiliate, has their own policy for everything they do outside it.

Who is responsible for what

For information about a store’s own shoppers and affiliates, the merchant is the controller and Hatzlacha Management LLC is a processor acting on their instructions. We do not decide what a merchant runs, who they recruit, or what they pay. For our own records — the store that installed the app, its billing, our logs — we are the controller.

What the app stores

About the store

• The .myshopify.com domain, store name, storefront URL and the store owner’s email address.
• Programme settings: commission rates, hold periods, payout thresholds, promo windows.
• Shopify access tokens, and any third-party API key the merchant chooses to add. Both are encrypted before they are written to disk.
• Subscription state, so the app knows which plan is active. Card details are never seen by us — Shopify bills the merchant directly.

About affiliates and creators

Recorded when a merchant invites someone, or when someone applies through the merchant’s public join page:

• First name, last name and email address.
• A payout email address and chosen payout method, where the merchant pays through the app.
• Anything written into the application form, such as where the person plans to share.
• The referral code and personal discount code issued to them, their balances and lifetime sales.
• Whether they consented to appear on the merchant’s leaderboard, and separately whether they licensed their content to be run as paid advertising. Both default to off and are only ever turned on by the person themselves.
• Any content they upload for the merchant to review.

About shoppers

The app receives order notifications from Shopify. For an order that carries a referral, it keeps the Shopify order and customer identifiers, the order total and currency, any discount code used, the customer’s email address, and a SHA-256 hash of that address. The hash exists so that a repeat buyer can be recognised, and so an affiliate cannot quietly earn commission on their own purchases. Orders with no referral on them are not stored.

We do not receive or keep shipping addresses, phone numbers, payment details or line-item contents.

About clicks

When someone follows an affiliate link, the app records:

• A one-way hash of the IP address. The raw IP address is never written down.
• The browser’s user-agent string, the destination path on the store, and the referring site’s bare hostname — the host only, never the full URL someone came from.
• A first-party cookie identifier, set for 30 days by default, which exists solely to credit the right affiliate if a purchase follows.

What we never do

• We do not sell personal information, and we never have.
• We do not use any of it to advertise to anyone.
• We do not combine data across merchants. Every record is scoped to a single store at the database layer, and a query that fails to name a store is refused rather than answered.

Who else sees it

Only the services the app needs to function, each doing one job and nothing else:

• Render — application hosting and the PostgreSQL database, in the United States.
• Shopify — the source of order and product information, and the biller for subscriptions.
• Resend — delivery of transactional email such as an affiliate’s sign-in link. It sees the recipient’s address and the message.
• Meta — only where a merchant explicitly chooses to push an approved piece of creator content into their own ad account. Nothing is sent otherwise.

How long it is kept

• On uninstall, the app’s sessions are deleted immediately and it stops receiving any further data from the store.
• The programme’s records are then held for a short window — Shopify allows 48 hours — so that a merchant who uninstalled by accident gets their programme back rather than losing it.
• When Shopify sends the store erasure request, every record belonging to that store is deleted. This includes affiliates, clicks, commissions, payouts, uploaded content and settings.
• When Shopify sends a customer erasure request, that shopper’s email address is cleared from any commission it appears on, while the commission itself remains so the merchant’s books still balance.

Your rights

Depending on where you live, you may have the right to see what is held about you, correct it, have it erased, or object to how it is used. Because we act on the merchant’s behalf, the fastest route is usually to ask the store you dealt with — Shopify passes that request to us automatically and we act on it. You can also write to us directly at the address below and we will help, either by acting on it ourselves or by putting you in touch with the merchant who holds it.

Security

Everything travels over HTTPS. Access tokens and merchant-supplied API keys are encrypted at rest with AES-256-GCM, under a key that is never stored beside them. IP addresses are hashed before they are written. Each webhook Shopify sends is signature-verified before it is acted on, and a redelivered one is recognised and ignored rather than double-counted.

No system is perfect. If you believe you have found a security problem, please write to us before disclosing it publicly and we will work with you on it.

Children

The app is for businesses. It is not directed at children and we do not knowingly collect information from anyone under 16.

Changes

If this policy changes in a way that affects what is collected or who it reaches, the effective date above changes with it and merchants are notified in the app.