Legal
Privacy policy — Affiliate & Referral
Last updated: 15 October 2026
This policy describes what the Datima: Affiliate & Referral app ("the app"), made by Datima.ai ("we"), stores when a merchant installs it on a Shopify store, what it stores about the affiliates who join that store's program, and what happens to that data afterwards. Write to support@datima.ai about anything on this page.
What the app does
The app runs one affiliate program for a store. People apply on a signup page of the store, the merchant approves them, and each gets a referral link. When a shopper opens the link, the app's theme embed adds a referral code to the shopper's cart; Shopify carries it onto the order, and the app credits the affiliate with the commission the merchant set. Affiliates see their earnings in a portal; the merchant exports what is owed and pays them outside the app.
What we hold, and why
| Data | Where it comes from | Why we hold it | Who sees it |
|---|---|---|---|
| Your store's domain, name, contact email, timezone and currency, and the scopes you granted | Shopify, at install | To run the app for your store; the contact email tells our team a store installed | Us |
| An access token for your store (and its refresh token) | Shopify, at install | So the app can read your orders, products and theme on your behalf | Nobody; encrypted (AES-256-GCM) and never shown |
| Your program: commission type and value, terms, approval mode, attribution window | What you set in the app | To credit orders and show the terms to applicants | You, and the affiliates who apply |
| Your store's logo, accent colour and storefront address | Your storefront's public data | To show the affiliate portal in your brand | Your affiliates |
| Affiliates: email, display name, password hash, state, the terms they accepted and when | The affiliate, at signup on your storefront | To let them sign in and to pay them; you approve or decline them | You (Affiliates page, payout file) and the affiliate |
| Affiliate sessions: a hash of the session token, when it was created and last used | The affiliate portal | To keep an affiliate signed in | Nobody |
| Each referred order: its id and number, date, line ids and quantities, merchandise value after discounts, whether it was credited and why | The order, through Shopify's order webhooks | To credit the affiliate and take the commission back on a cancellation or full refund | You (Orders page), and the credited affiliate sees the order number and their commission |
| Commission and payout records | The app | To show what each affiliate earned and what you paid | You and the affiliate |
| An IP address, for 15 minutes | A sign-in or signup attempt | To slow down password guessing and signup floods | Nobody |
Nothing about your shoppers
The app does not request and does not store a shopper's name, email address, phone number or address. Order notifications from Shopify are cut down to the fields above before anything is saved; Shopify's privacy notifications are cut down to the store and the order numbers they name. The theme embed sets no cookie and stores nothing in the shopper's browser: the referral travels as an attribute of the shopper's cart, which Shopify keeps on the order in your admin. Orders placed without a referral link are not recorded; their notifications are deleted after 30 days.
Where it is held
The app runs on Amazon Web Services in the United States. Data is encrypted in transit. Store access tokens are encrypted and affiliate passwords are hashed (scrypt); a new password is checked against known breaches by sending only the first five characters of its SHA-1 hash to Have I Been Pwned. Every store's rows are separated by row-level security in the database and never returned to another store.
How long
- For the life of the install. When you uninstall (Shopify's app/uninstalled webhook) the app destroys its access to your store at once. Your program, affiliates and records are kept so a reinstall restores them.
- About 48 hours after an uninstall Shopify sends shop/redact, and every row of your store is deleted: program, affiliates, sessions, links, orders, commission and payout records, and every notification received for your store. Your store's domain and its install dates are kept as the record that the app was installed.
- Notifications of orders no affiliate referred: 30 days. An IP address used for throttling: 15 minutes. An affiliate session: until sign-out, or 30 days without use.
- When Shopify sends customers/redact or customers/data_request for a shopper, the app answers that it holds no data about them, because it never stored any.
Sub-processors
- Amazon Web Services — hosting and the database.
- Shopify — the source of your orders, products and theme.
- Have I Been Pwned — the five-character password-hash prefix described above, nothing else.
- Slack — our team's install notification: your store's name, domain and contact email.
Nobody else receives your store's or your affiliates' data.
What we do not do
We do not sell, rent or share data with anyone for their own purposes. We send no email, run no advertising and no analytics, and record no clicks or visits. We do not use the data to train models, to profile shoppers or affiliates, or to advise other merchants. We do not read more of your store than the app's declared Shopify scopes allow: orders, products and themes.
Your rights
Merchants can see what the app holds about their program inside the app, export what affiliates are owed, and delete everything by uninstalling. Affiliates can see their account and earnings in the portal; to correct or delete an affiliate account, contact the store that runs the program, or write to us. If you are a shopper of a store that uses the app, the app holds nothing about you.
Website analytics
The website (datima.ai) uses Google Analytics to understand how visitors find and use the site, with cookies set by Google only after you accept the cookie banner. That is the website, not the app: the app sets no cookies on your storefront and runs no analytics.
Changes
We will post changes to this page and update the date at the top.
Contact
support@datima.ai — Datima.ai.