Effective 31 October 2026. Oru Studio operates Promo Proof. Contact naimkst@gmail.com about this policy or your data.
We process your shop domain, Shopify authentication/session information, active product variant identifiers, titles, SKUs, prices, item costs, store currency, and the campaign baskets and assumptions you save. Shopify may supply staff identity fields as part of authentication. The app does not request customer or order access.
We use this information to authenticate your store, synchronize your catalog, calculate estimates, save your campaigns, provide support and operate the service. Shopify provides platform authentication/API services; Contabo provides our application hosting. We do not sell your data, use advertising trackers, or send your catalog to an AI provider. Data is processed on our hosted infrastructure and may be processed outside your country.
Connections use HTTPS. Access and refresh tokens, catalog snapshots, campaign names and campaign content are encrypted by the application before database storage. Shop identifiers and operational timestamps remain lookup metadata. Service access is restricted. Encrypted daily backups are retained for seven days. No security method is an absolute guarantee.
Current catalog data is replaced on a successful sync. Saved campaigns remain until you delete them or uninstall. We delete active app data when we process a verified uninstall or Shopify shop-redaction request. If you reinstall before an older event arrives, we retain the newly authorized workspace and ignore the older event. Encrypted backup copies expire within seven days; a deletion log is reapplied if restoring a backup to prevent restoration of removed shop data. Operational logs omit query strings, tokens and request bodies, and are limited by server retention settings. Local development demo records are purged after one day.
You can export campaign estimates as CSV and delete snapshots in the app. Uninstall through Shopify to stop access. For an access, correction, deletion or privacy request, contact us with your shop domain; we may verify your authority before responding. Do not send customer data or credentials.
The embedded application uses Shopify session authentication. The local-only sample workspace uses an essential cookie; it is disabled in production. We may update this policy and will publish a revised effective date here when we do.