EMRA Privacy Policy

Effective date: 29 June 2026

This Privacy Policy explains how Zeviter ("EMRA", "we", "us") handles information when you install and use EMRA, a team task-management app for Shopify stores (the "App").

1. Our role

When a Shopify merchant installs EMRA, the merchant is the data controller for the information processed through the App, and we act as a data processor on the merchant's behalf. We process information only to provide and operate the App.

2. Information we collect

We collect only what the App needs to function:

• Store information: your store's myshopify.com domain and basic store details (such as time zone and currency) provided by Shopify when you install. We use the store domain to keep each store's data separate.
• Team member information: for the people on your team who use the App, we store the name, email address, Shopify staff identifier, and any display name and role you set. This lets the App show who created or is assigned to each task.
• Content you create: the tasks, tickets, steps, projects, categories, comments, dates, and any other text your team enters into the App.
• Technical information: standard server and security logs, such as IP address, browser type, and timestamps, generated when the App is used.

3. Information we do not collect

EMRA does not collect, store, or process the personal data of your store's customers (shoppers). We do not access or store customer names, email addresses, shipping addresses, order details, or payment information. The App's features operate on your team's task data only.

4. How we use information

We use the information above to provide and operate the App's task-management features; keep each store's data isolated and secure; authenticate team members and show assignments and history; respond to support requests; and maintain, secure, and improve the service. We do not sell your information, and we do not use it for advertising.

5. Legal bases (UK and EU GDPR)

Where UK or EU data protection law applies, we process information on the basis of performing our contract with the merchant (providing the App) and our legitimate interests in operating, securing, and improving the service.

6. Sharing and subprocessors

We do not sell or rent information. We share information only with service providers that help us run the App, under appropriate data-protection terms:

• Shopify — the platform the App runs on.
• Render — application hosting (data processed in the European Union, Frankfurt region).
• Neon — database hosting (data stored in the European Union, London region).

We may also disclose information where required by law.

7. Where your information is stored

EMRA's application and database are hosted in the European Union (Frankfurt and London regions).

8. Data retention and deletion

We retain your data for as long as the App is installed. Tasks you delete are moved to a recoverable Bin and can be permanently removed from there. When you uninstall the App, we delete your store's data from our systems within 30 days, including on receipt of Shopify's shop redaction request.

9. Shopify compliance requests

Shopify requires all apps to support three privacy webhooks. We handle them as follows:

• shop/redact (sent after uninstall): we delete the store's data from our systems.
• customers/redact and customers/data_request: because EMRA stores no customer personal data, there is no customer information for us to erase or return. We acknowledge these requests and confirm that no such data is held.

10. Security

We use industry-standard measures to protect information, including encryption of data in transit (HTTPS) and access controls that limit who can reach the systems holding your data. No method of transmission or storage is completely secure, but we work to protect your information appropriately.

11. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your information, or to object to or restrict certain processing. Because we act on the merchant's behalf, we will work with the merchant to honour these requests. To make a request, contact us at Support@Zeviter.com.

12. Children

EMRA is a business tool, is not directed to children, and we do not knowingly collect information from children.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version at this URL and revise the effective date above. We will communicate significant changes through the App or by email where appropriate.

14. Contact

Zeviter
Support@Zeviter.com