Privacy Policy — Donations & Round-up

Last updated: 2026-10-16

Donations & Round-up (“the app”) is a Shopify app operated by EarnToLink (언투링크), a sole proprietorship registered in the Republic of Korea. This policy explains what the app collects when a merchant installs it, how it is used and how it is deleted.

Information the app stores

• Your shop domain and the access token Shopify issues at install (to call the Shopify API on your behalf).
• Your settings: the cause name and website, the message shown to shoppers, the fixed donation amounts, round-up and goal settings, the ID of the donation product the app created, your shop currency and time zone.
• Payments you record as proof of donation: date, amount, recipient, reference, a link you provide and a note.
• An activity log of what the app did (no customer data).
• Shopify login sessions needed to open the app.
• A copy of the storefront settings in an app metafield inside your store, read by the Donation theme block.

Information the app reads but does not keep

• Orders and refunds (only to find the donation items in them) — received by the orders/paid and refunds/create webhooks or read when you press “Sync recent orders”.
• Your shop name, currency and time zone, and your current app plan.

Your customers’ personal data

The app stores the following personal data of your customers, only to provide the feature you enabled:

• For each paid order that contained a donation: the order ID, the donation amounts (fixed and round-up), the currency and the time. Refunds of donations: the refund ID, order ID, amounts and time. No names, emails, addresses, phone numbers or other items of the order are stored.

It is deleted when Shopify sends a customers/redact request for that customer, and all shop data is deleted on shop/redact (48 hours after uninstall).

How the information is used

Only to provide the app’s features to you. We do not sell data, do not use it for advertising, and do not use it to train AI models.

Where it is stored

On Cloudflare (Workers and D1 database) in Cloudflare’s global network. Data is encrypted in transit (HTTPS) and at rest (Cloudflare D1 storage encryption). Billing is handled by Shopify; the app never sees payment card details.

Retention and deletion

• Donation records (order ID and amounts) are deleted automatically 730 days after the order.
• Activity log entries are deleted automatically after 60 days.
• When a customer asks to be forgotten (customers/redact), the order IDs of their orders are removed; the anonymous amounts stay in your totals.
• Everything the app stored is deleted 48 hours after you uninstall (shop/redact). The donation product stays in your store until you delete it.

When you uninstall the app, we stop accessing your store. Shopify then sends a shop/redact request and we delete all data of your shop. You can ask for deletion at any time by email.

Your rights

You (and your customers, through you) can request access, correction or deletion of personal data. Requests that come through Shopify’s customers/data_request are answered within 30 days.

Terms and data processing

Use of the app is governed by our Terms of Service and Data Processing Addendum, which form the data protection agreement between you (the merchant, as controller) and us (as processor).

Contact

EarnToLink — help@earntolink.com