Winfluencer

Beyond Likes. Into Sales.

Login
Login
Register
Register
Legal · winfluencer.online

Privacy Policy
for Winfluencer

Last updated: April 6, 2026 Shopify App GDPR Compliant
Contents
01

Who We Are

Winfluencer ("we", "us", "our") is a Shopify application that helps merchants track and measure the performance of their influencer marketing campaigns. The app is operated by Winfluencer, reachable at randi@winfluencer.online.

Registered address: 340 Torrens Road, Croydon Park SA 5008, Australia.

02

What Data We Collect

From Merchants (Shopify store owners)
  • Your Shopify store domain and access token — required to authenticate with the Shopify API
  • Campaign and influencer details you enter manually (names, handles, platforms)
  • Order data from your store via Shopify webhooks (order total, line items, timestamps)
From Your Storefront Visitors
  • Tracking identifier (wf_id) — a short anonymous ID appended to influencer links to identify which influencer referred a visitor
  • Session ID — a randomly generated ID to group events within a browsing session (expires after 30 minutes of inactivity)
  • Behavioural events — page views, product views, add-to-cart actions, checkout starts, and purchases
  • Multi-touch journey — the sequence of influencer links a visitor clicked before purchasing
No PII collected from visitors. We do not collect names, email addresses, IP addresses, or any personally identifiable information from storefront visitors.
03

How We Use This Data

We use the data collected solely to provide the Winfluencer service:

  • Attributing sales and traffic to individual influencers
  • Displaying campaign performance metrics to merchants
  • Generating conversion funnel and journey analytics
We do not sell, rent, or share your data with any third parties. We do not use visitor data for advertising.
04

Data Storage & Deletion

All data is stored in a secure PostgreSQL database hosted on NeonDB, located in the United States. Data is retained for as long as your Shopify store has the app installed.

Soft-Delete Policy 30-Day Deletion Window

When you uninstall the app or submit a data deletion request, we implement a two-stage deletion process — ensuring data can be recovered in the event of an accidental request, while still meeting our 30-day deletion commitment.

Day 0 — Immediate
Your data is soft-deleted. Flagged as deleted and removed from all active dashboards and API responses. No longer accessible through the app.
Days 1–30 — Quarantine Window
Soft-deleted data is held in a quarantine state — isolated and inaccessible — for up to 30 days to allow recovery in the event of a mistake.
Day 30 — Permanent Purge
All store data — including shop records, campaign data, event logs, and order attribution — is permanently and irreversibly deleted from our database.
Accidental uninstall? Contact us at randi@winfluencer.online before the 30-day window closes to request data recovery.
05

Cookies & Local Storage

Winfluencer uses the browser's localStorage (via Shopify's Web Pixel sandbox) to persist the influencer tracking ID and session ID across pages. This is functional data required for attribution to work correctly.

No third-party cookies. We do not use any third-party cookies, advertising pixels, or cross-site tracking technologies.
06

GDPR — Your Rights

If you or your customers are located in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Object to processing of your data

To exercise these rights, contact us at randi@winfluencer.online. We will respond within 30 days.

International data transfers. Your data may be transferred to and processed in the United States, where our database infrastructure is hosted. By using Winfluencer, you consent to this transfer. We take appropriate safeguards to ensure your data is protected in accordance with this policy.
07

Shopify Privacy Webhooks

Winfluencer complies with Shopify's mandatory privacy webhooks. All deletion requests follow our soft-delete process, with permanent purge completed within 30 days.

  • Customer data requests — we respond within 30 days
  • Customer data deletion — soft-deleted and permanently purged within 30 days
  • Shop data deletion — upon uninstall, all store data is soft-deleted immediately and permanently purged within 30 days
08

Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the app after changes constitutes acceptance of the updated policy.

09

Contact

For any privacy-related questions or requests, reach us at: