Privacy Policy

You don't need an account to search zhopr. When you click through from zhopr to a listed webshop, we generate a random, anonymous tracking token attached to that click - used only to measure that the visit came from zhopr, and to calculate the commission a webshop owes us if it leads to a sale. This token isn't linked to your name, email, or any other personal information, because we don't collect any from shoppers to begin with.

Whatever happens after you land on a merchant's own site - browsing, creating an account, buying something - is between you and that merchant, governed by their own privacy policy, not this one.

If you list or claim a webshop on zhopr, we collect: your name and email (to create your merchant account - your password is stored as a one-way hash, never in plain text); your shop's name, description, website, contact details, and country; and the product listings you choose to feature.

If you connect Shopify or WooCommerce, we request read-only access to your products and orders (via Shopify OAuth, or an API key you generate yourself for WooCommerce) so we can show your real products and detect purchases zhopr referred to you. Those credentials are encrypted at rest and only ever used to read product/order data or register the webhooks needed to detect a referred sale - never to make changes in your store. You can disconnect at any time, which immediately revokes our access.

If you enable commission billing, your card details are handled entirely by Stripe, our payment processor - zhopr never sees or stores your full card number, only the card brand and last 4 digits for your own reference.

To operate the marketplace: show your shop to shoppers, detect referred sales, calculate and collect the commission owed, and send you transactional emails (e.g. account confirmations, billing receipts, or a nudge if you've signed up but haven't published anything yet). We don't use your information for advertising, and we don't sell personal information to anyone.

• Stripe - to process commission payments and store payment methods securely.
• Shopify or WooCommerce - only for your own store, if you choose to connect one, to read your products/orders.
• Bright Data- an infrastructure vendor we use to discover publicly listed webshops from the open web. This doesn't involve any personal information.
• Our email and hosting providers - to send transactional email and run the zhopr application itself.

We don't share your information with anyone else, and we never sell it.

zhopr's Shopify integration does not receive or store your end customers' personal information. We only read order totals, currency, and a referral token to calculate commission - never customer names, addresses, or contact details. If Shopify forwards us a customer data request or redaction request on your behalf, we can confirm immediately that we hold nothing to return or delete, because we never collected it.

zhopr sets one cookie: a secure, httpOnly session cookie when you log in as a merchant or admin, used only to keep you signed in. We don't use advertising or third-party tracking cookies.

You can ask us to access, correct, export, or delete the personal information we hold about you at any time - just email us. Merchant accounts and their data can also be deleted directly from your dashboard settings.

Passwords are hashed, not stored in plain text. Integration credentials (Shopify/ WooCommerce) are encrypted at rest. All traffic to zhopr is encrypted in transit (HTTPS).

If we make material changes to this policy, we'll update the date at the top of this page.

Questions about this policy or your data? Email johan@aurumo.se.