Privacy Policy

Seedr — Last updated: April 5, 2026

1. Introduction

This Privacy Policy describes how INFLUXX IO LLC (“we,” “us,” or “our”) collects, uses, stores, and protects information through Seedr (“the App”), available on the Shopify App Store. By installing or using the App, you (“Merchant”) agree to the practices described in this policy.

Seedr is an affiliate marketing platform that helps Shopify merchants create and manage affiliate programs. This policy covers data practices for both merchants who install the App and affiliates who participate in merchant programs.

2. Information We Collect

2.1 Merchant Data (Collected via Shopify)

When you install Seedr, we access the following data through Shopify’s API with your explicit consent:

• Store information — Shop name, domain, email, currency, and locale
• Order data — Order IDs, totals, line items, discount codes, customer details (for commission attribution)
• Product data — Product IDs, titles, prices, collections (for product-level commission rules)
• Customer data — Customer IDs, names, email addresses (for affiliate attribution and lifetime commissions)
• Discount data — Discount codes created for affiliate tracking

2.2 Affiliate Data (Collected via Affiliate Portal)

When affiliates sign up through a merchant’s affiliate portal, we collect:

• Account information — Name, email address, password (hashed)
• Payment information — PayPal email address (for automated payouts)
• Profile information — Social media handles, website URL, promotional methods
• Activity data — Referral link clicks, attributed orders, commission history, login timestamps

2.3 Tracking Data

To attribute sales to affiliates, the App collects:

• Referral cookies — A first-party cookie set when a customer clicks an affiliate link (configurable duration, default 30 days)
• UTM parameters — Campaign tracking parameters from referral URLs
• IP addresses — Used for fraud detection (self-referral prevention, IP blocking)
• Landing page URLs — The page a referred customer first visited

2.4 Technical Data

• Browser type and version — For compatibility and debugging
• Session data — Shopify session tokens for authentication

3. How We Use Your Information

We use collected information to:

• Operate the App — Track referrals, calculate commissions, process payouts, manage affiliate accounts
• Detect fraud — Identify self-referrals, suspicious IP patterns, and duplicate orders
• Send notifications — Commission alerts, payout confirmations, campaign updates
• Improve the App — Aggregate, anonymized usage analytics to improve features and performance
• Provide support — Diagnose issues and respond to support requests

We do not:

• Sell personal data to third parties
• Use merchant or affiliate data for advertising
• Share data between different merchants’ affiliate programs
• Access data beyond what the approved Shopify API scopes allow

4. Data Sharing

We share data only in the following circumstances:

• Between Merchant and Their Affiliates — Merchants can view their affiliates’ performance data. Affiliates can view their own commission and referral data for that merchant.
• Payment Processors — PayPal receives affiliate email addresses and payout amounts when merchants use automated payouts.
• Infrastructure Providers — Our hosting providers (AWS) process data as part of running the App. They do not have independent access to your data.
• Legal Requirements — We may disclose data if required by law, court order, or governmental regulation.

5. Data Storage and Security

• Storage location — Data is stored in PostgreSQL databases hosted on Amazon Web Services (AWS) in the United States.
• Encryption — All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Access controls — Database access is restricted to application services via private networking.
• Password hashing — Affiliate passwords are hashed using bcrypt before storage.
• Session management — Shopify OAuth tokens are stored securely and rotated per Shopify’s requirements.

6. Data Retention

• Merchant data — Retained while the App is installed. Upon uninstallation, Shopify session data is deleted immediately. Store settings, affiliate, and commission data are retained for 30 days, then permanently deleted.
• Affiliate data — Retained while the merchant’s App is installed and the affiliate account is active. Merchants can delete individual affiliates at any time.
• Tracking cookies — Expire based on the merchant’s configured cookie duration (default: 30 days).
• Fraud detection logs — IP address logs are retained for 90 days, then anonymized.

7. Your Rights

For Merchants (Data Controllers):

• Access — View all data the App stores via the admin interface
• Export — Export affiliate lists, commission reports, and payout history as CSV
• Deletion — Uninstall the App to trigger data deletion; or contact us for immediate deletion
• Portability — Request a full data export in machine-readable format

For Affiliates (Data Subjects):

• Access — View your data through the affiliate portal dashboard
• Correction — Update your profile and payment information at any time
• Deletion — Request account deletion through the merchant or by contacting us directly
• Objection — Opt out of marketing emails via unsubscribe links

For EU/EEA Residents (GDPR):

In addition to the above, you have the right to:

• Lodge a complaint with your local data protection authority
• Withdraw consent at any time (without affecting prior lawful processing)
• Request restriction of processing

To exercise any rights, contact us at privacy@influxx.io.

8. International Data Transfers

Data is processed in the United States. For EU/EEA users, transfers are conducted under Standard Contractual Clauses (SCCs) as approved by the European Commission, ensuring adequate data protection.

9. Children’s Privacy

Seedr is not intended for use by individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Cookies

Cookie	Purpose	Duration
_affiliate_ref	Tracks which affiliate referred a customer	Configurable (default 30 days)
Shopify session cookies	Authenticate merchant sessions	Session-based

No third-party tracking cookies are used.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the App’s admin interface and/or email. Continued use of the App after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or requests:

• Email: privacy@influxx.io
• Company: INFLUXX IO LLC
• Address: Scottsdale, Arizona, United States

For Shopify-specific data questions, contact Shopify at privacy@shopify.com.