Marka Metrics privacy policy

Who we are

Marka Metrics ("the app") is provided by House of Marka ("we", "us"). This policy explains what the app collects when a merchant installs it on a Shopify store, how it is used, and the choices merchants and their customers have.

Information we collect

Store information: store name, domain, contact email, currency, time zone, plan and settings, and what the merchant types into the app (costs, ad spend, monthly sales targets, notes on dates).

Staff preferences: for each staff member who opens the app, the Shopify user ID that identifies their account, kept with the dashboard layout and the appearance (light or dark, glass or solid) they chose.

Commerce data, through Shopify's Admin API and webhooks: orders (amounts, items, discounts, tax lines with their names and rates, tax-exempt status and the kind of exemption, payment gateway names, each payment attempt with its method, card brand, wallet, fees and decline code (never a card number), Shopify's fraud recommendation, returns with Shopify's reason for each (never the customer's own note), fulfilment and refund status, shipping city, state, country and postal code, marketing attribution such as UTM parameters and referring site), products, variants, inventory and collections.

Customer data: customer IDs, order history and location (city, state, country, postal code). If the merchant keeps the setting 'Store customer details' on, names, email addresses and phone numbers are stored encrypted (AES-256-GCM) so staff can see who their top customers are. Merchants can turn this off at any time, which deletes stored names, emails and phones.

Shopify Payments data, for stores that use Shopify Payments: the account's balance and payout schedule, payouts, the balance movements behind them (charges, refunds, fees, adjustments) and disputes with their reason, status and deadlines. Bank account numbers and dispute evidence are never read.

Storefront behaviour, through the Marka web pixel, only for visitors who allow analytics under the store's cookie/consent settings: the pages, products and collections viewed, what was searched for in the store's search (with anything that looks like an email address or a phone number removed), cart and checkout steps and the messages checkout shows, which buttons and links are clicked, which forms are submitted, which checkout field a shopper was on, and how long a page stays open. Of a click, a form or a field the pixel records which one it was (its kind, id and name, and where a link leads), never what is typed into it. Device type, browser and language are derived from the user agent. Visitor identifiers are pseudonymised with a keyed hash before storage, and a random identifier for the visit is kept in the browser for the length of the visit. When a visitor is logged in or completes checkout, the Shopify customer ID and order ID are recorded so visits can be linked to orders. The pixel does not collect names, emails, phone numbers, addresses or payment details, does not record the screen, and shows or changes nothing on the storefront. Merchants can switch off the recording of clicks, forms and checkout fields in Settings.

How we use information

To provide the app's features to the merchant: reports, dashboards, customer segments, predictions, forecasts, an analysis of where visits and checkouts stop, lists of products that are bought or viewed together, exports, scheduled reports and email summaries of the store's figures. Everything the app produces is shown to the merchant and their staff inside the Shopify admin; the app displays nothing to a store's customers.

We do not sell personal information, do not use it for advertising, and do not combine data across different merchants' stores.

Where data is stored and who processes it

Data is stored in Microsoft Azure (PostgreSQL and, for export files, Azure Blob Storage) in the region chosen for the deployment, encrypted in transit (TLS) and at rest. Our only sub-processor is Microsoft Azure (hosting, database, email delivery). Shopify is the platform the data comes from and the app is billed through. No store or customer data is sent to an AI service, an advertising platform or a marketplace.

Retention and deletion

Storefront events are kept for the period the merchant chooses (30 to 400 days, default 395). Export files are deleted after 7 days.

When the app is uninstalled, data collection stops immediately and all store data is deleted after 30 days, or within 48 hours of receiving Shopify's shop erasure request.

Customer data requests and erasure requests sent by Shopify on behalf of customers are processed automatically: requested data is compiled for the merchant, and erased customers' personal data is removed while anonymous sales totals are kept for the merchant's accounting.

Your rights

Customers of a store should contact that store to access, correct or delete their data; the store's requests reach us through Shopify. Merchants can contact us at the address below for any privacy question, including requests under the GDPR, the UK GDPR, US state privacy laws such as the CCPA/CPRA, and India's Digital Personal Data Protection Act, 2023.

Security

Access to production systems is limited to authorised personnel. Shopify access tokens and customer details are encrypted at the field level (AES-256-GCM), access to customer-level data in the app is logged, and all connections use TLS.

Changes and contact

We will update this policy when our practices change and post the new date above. Contact: privacy questions can be sent to the support email shown in the app listing.