AdamirBack to home

Privacy Policy

Effective April 10, 2026

This Privacy Policy describes how Adamir ("we," "us," or "our") collects, uses, and shares information when you install the Adamir Shopify application ("App") on your Shopify store. By installing or using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

When you install the App, we receive information directly from Shopify through the OAuth authorization flow and from subsequent API calls that the App makes to your store. Specifically:

  • Store information: your Shopify store domain, store owner email, store name, timezone, currency, country, and plan type.
  • Product data: products, variants, collections, product images, and inventory records via the read_products scope.
  • Order data: order history, order totals, line items, and fulfillment status via the read_orders scope.
  • Customer data: customer names, email addresses, shipping and billing addresses, order history, and marketing opt-in status via the read_customers scope.
  • Discount data: discount codes, promotions, and usage via the read_discounts scope.
  • Authentication tokens: the offline access token Shopify issues when you install the App. Tokens are encrypted at rest using AES-256.
  • Usage logs: standard server access logs (IP address, user agent, timestamp, request path) used for debugging and abuse prevention.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the App's features.
  • Generate aggregated benchmarks and category comparisons to help merchants understand their store's performance relative to peers.
  • Authenticate your store on each session and API request.
  • Respond to support requests and communicate about the App.
  • Comply with legal obligations, enforce our Terms of Service, and detect fraud or abuse.

We do not sell your personal information or your customers' personal information to third parties. We do not use customer personal data for advertising.

3. How We Share Information

We share information only in limited circumstances:

  • Service providers: we use third-party infrastructure providers to operate the App, including hosting (Vercel), database (PlanetScale), and transactional email (Resend). These providers process data solely on our behalf under contractual data-protection obligations.
  • Legal requirements: we may disclose information when required by law, subpoena, or to protect the rights, property, or safety of Adamir, our users, or others.
  • Business transfers: if Adamir is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you of any change in ownership.

4. Data Retention

We retain your store data for as long as the App remains installed. When you uninstall the App, Shopify sends us a shop/redact webhook 48 hours later, at which point we delete your store record and all associated data from our systems within 30 days. Backups are retained for an additional 30 days before being purged.

5. Your Rights (GDPR, CCPA)

If you are located in the European Economic Area, United Kingdom, or California, you have the following rights regarding your personal information:

  • Access the personal information we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing activities.
  • Request a portable copy of your data.

Merchants can exercise these rights by uninstalling the App or contacting us at support@adamir.com. Customers of Shopify merchants should contact the merchant directly; Shopify will forward data access and deletion requests to us via the customers/data_request and customers/redact webhooks, which we honor within the timeframes required by applicable law.

6. Data Security

We protect your data with industry-standard security measures, including encryption in transit (TLS 1.2+), encryption at rest for sensitive fields like access tokens (AES-256), and access controls on our internal systems. No system is perfectly secure, and we cannot guarantee absolute security, but we work continuously to maintain strong protections.

7. International Transfers

Our services are operated in the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States. By using the App, you consent to this transfer.

8. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy at this URL and revise the "Effective" date at the top. Material changes will be communicated to merchants through the App admin or via email.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at support@adamir.com.