Brand Store Privacy Policy

1. About mixa

The mixa Shopify App enables participating brands and merchants to connect their Shopify store with mixa.

The App is primarily used to:

• sync product and catalogue information from a merchant’s Shopify store with mixa;

• keep relevant product information on mixa up to date;

• receive order and conversion events associated with mixa-referred traffic;

• attribute purchases and other conversion activity to mixa, creators, campaigns, or referral links;

• provide merchants and mixa with reporting, measurement, reconciliation, and related commerce functionality.

Data Controller / App Provider:

Mixa FZE LLC
Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Licence No.: 4431542.01
Privacy contact: privacy@mixa.global

2. Information We Access or Receive From Shopify

Depending on the permissions granted to the App and the features used by a merchant, mixa may access or receive the following categories of information.

2.1 Merchant and Store Information

This may include:

• Shopify store ID;

• store name and domain;

• store URL;

• merchant/store configuration information;

• currency;

• locale or country;

• information necessary to authenticate and maintain the Shopify connection;

• App installation and uninstallation information.

2.2 Product and Catalogue Information

mixa may access information required to display or synchronize a merchant’s products, such as:

• product IDs;

• product names and descriptions;

• product images;

• variants;

• SKUs;

• prices and compare-at prices;

• product URLs;

• inventory or availability information where required;

• collections;

• vendor or brand information;

• product status and other catalogue metadata.

This information is used to maintain the merchant’s catalogue within the mixa platform and associated creator/storefront experiences.

2.3 Order and Conversion Information

Where authorized by the merchant, mixa may receive order or transaction information required for conversion measurement and attribution, including:

• Shopify order ID;

• order date and time;

• order status;

• products or variants purchased;

• quantities;

• order value;

• discounts;

• taxes or shipping values where required for reporting;

• currency;

• refunds, cancellations, or related transaction updates;

• referral, campaign, click, creator, UTM, or attribution identifiers associated with a transaction.

mixa uses this information primarily to determine whether a transaction resulted from mixa-referred traffic and to support attribution, reporting, reconciliation, commissions, and related platform functionality.

2.4 Customer Information

Depending on the Shopify permissions granted to the App and the information Shopify includes in an authorized order or privacy request, certain customer information may be received.

mixa is designed to minimize the collection and use of customer personal information and only processes customer information that is necessary for the App’s permitted functionality, legal obligations, security, or Shopify privacy compliance.

Where mixa does not require a particular customer field for attribution or platform functionality, we seek to avoid using that field for unrelated purposes.

3. How We Use Information

We may use information obtained through Shopify to:

• connect and authenticate a merchant’s Shopify store;

• import and synchronize product catalogues;

• display merchant products through mixa;

• maintain product availability and related catalogue information;

• measure orders and conversions associated with mixa;

• attribute sales to creators, links, campaigns, or other referral sources;

• calculate and reconcile commissions or other commercial metrics where applicable;

• provide reporting and analytics to authorized merchants and mixa users;

• detect duplicate, invalid, fraudulent, or suspicious transactions;

• process refunds, cancellations, and attribution adjustments;

• troubleshoot and maintain the App;

• provide merchant support;

• secure mixa systems and prevent misuse;

• comply with Shopify requirements and applicable law;

• respond to lawful privacy, regulatory, or legal requests.

mixa does not sell Shopify merchant or customer personal information.

4. Legal Bases and Merchant Instructions

Where applicable privacy law requires a legal basis for processing personal information, mixa processes information on one or more of the following bases:

• performance of a contract;

• legitimate business interests;

• compliance with legal obligations;

• consent, where consent is required;

• processing performed on the instructions of a merchant or other authorized party.

The roles of mixa and a Shopify merchant may vary depending on the particular information and processing activity. Where mixa processes personal information solely on behalf of a merchant, mixa may act as a service provider or processor as defined under applicable privacy laws.

5. Sharing of Information

mixa does not sell Shopify merchant or customer personal information.

We may disclose information to carefully selected service providers where reasonably necessary to operate the App and mixa platform, including providers that support:

• cloud infrastructure and hosting;

• databases and data storage;

• application monitoring and security;

• analytics and reporting infrastructure;

• email or communications;

• customer support;

• attribution or measurement;

• professional, legal, accounting, or compliance services.

These providers are permitted to process information only as necessary to provide services to mixa and subject to applicable contractual and confidentiality obligations.

We may also disclose information:

• when required by law, regulation, court order, or lawful government request;

• to investigate or prevent fraud, security incidents, or misuse;

• to protect the rights, safety, or property of mixa, merchants, creators, customers, or others;

• as part of a merger, acquisition, financing, restructuring, or sale of all or part of the business, subject to appropriate safeguards.

6. Data Retention

mixa retains Shopify-derived information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the App, maintaining attribution and transaction records, supporting reconciliation, resolving disputes, complying with legal obligations, preventing fraud, and enforcing agreements.

Merchant authentication credentials and store connection information are removed or invalidated when they are no longer required to provide the App.

Following an App uninstall, mixa will delete or anonymize merchant and Shopify-derived personal information in accordance with Shopify’s required privacy processes and applicable law, except where information must be retained for legitimate legal, regulatory, accounting, fraud-prevention, dispute-resolution, or contractual purposes.

Where information must legally be retained, access will be restricted and the information will not be used for unrelated purposes.

7. Shopify Privacy Requests and Mandatory Compliance Webhooks

mixa supports Shopify’s mandatory privacy and compliance processes.

The App is designed to process the following Shopify privacy request types:

customers/data_request

When Shopify informs mixa that a customer has requested access to their personal information, mixa will identify and provide the relevant information, where applicable, in accordance with Shopify requirements and applicable law.

customers/redact

When Shopify sends a valid customer deletion request, mixa will delete, anonymize, or otherwise appropriately process the relevant customer personal information, except where retention is required by law.

shop/redact

Following an App uninstall and receipt of Shopify’s shop redaction request, mixa will delete or anonymize personal information associated with the merchant’s Shopify store that mixa is no longer required to retain.

mixa verifies Shopify privacy webhook requests using the security mechanisms required by Shopify.

8. App Uninstallation

A merchant may uninstall the mixa Shopify App at any time through Shopify.

After uninstallation:

• mixa will no longer use the Shopify authorization to obtain new store information;

• access tokens associated with the disconnected store will no longer be used;

• mixa will process Shopify’s required shop-redaction request;

• Shopify-derived information that is no longer required will be deleted or anonymized;

• limited records may be retained where necessary for legal, accounting, fraud-prevention, attribution reconciliation, dispute resolution, or other legitimate obligations.

A merchant may also contact privacy@mixa.global regarding deletion of data associated with the App.

9. Data Security

mixa uses reasonable administrative, organizational, and technical safeguards designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction.

These safeguards may include:

• encrypted communications using HTTPS/TLS;

• access controls;

• role-based permissions;

• credential and secret management;

• environment separation;

• logging and monitoring;

• restricted production access;

• security review and incident-response procedures.

No system can guarantee absolute security, but mixa takes reasonable measures appropriate to the nature of the information being processed.

10. International Data Transfers

mixa and its service providers may process information in countries other than the country in which a merchant or customer is located.

Where required by applicable law, mixa uses appropriate safeguards for international transfers of personal information, which may include contractual protections or other legally recognized transfer mechanisms.

11. Merchant Responsibilities

Shopify merchants using the mixa App are responsible for:

• ensuring they are authorized to connect their Shopify store to mixa;

• providing appropriate privacy notices to their customers where required;

• obtaining any legally required consent for tracking, attribution, or data processing;

• configuring their Shopify store and mixa integration appropriately;

• complying with applicable privacy, consumer-protection, marketing, and ecommerce laws.

Use of the App does not replace a merchant’s own privacy and compliance obligations.

12. Customer and Merchant Privacy Rights

Depending on applicable law, individuals may have rights relating to their personal information, including rights to:

• request access;

• request correction;

• request deletion;

• object to or restrict certain processing;

• request portability;

• withdraw consent where processing is based on consent;

• lodge a complaint with an applicable supervisory authority.

Shopify customers may normally submit privacy requests through the Shopify merchant with whom they transacted.

Merchants or other individuals may also contact mixa at:

privacy@mixa.global

We may need to verify a request before acting on it.

13. Children’s Privacy

The mixa Shopify App is intended for use by businesses and merchants and is not designed to knowingly collect personal information directly from children.

If mixa becomes aware that information has been collected in circumstances requiring parental consent or another legal basis that has not been obtained, mixa will take appropriate steps in accordance with applicable law.

14. Changes to This Policy

We may update this Shopify App Privacy Policy from time to time to reflect changes to:

• the mixa Shopify App;

• our data practices;

• Shopify requirements;

• applicable laws or regulations;

• our service providers or business operations.

The updated version will be published at the applicable mixa privacy-policy URL with a revised Last Updated date.

Material changes will be communicated where required by law or applicable Shopify requirements.

15. Contact Us

Questions or requests concerning this Privacy Policy or mixa’s processing of Shopify information can be sent to:

Mixa FZE LLC
Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Licence No.: 4431542.01

Privacy: privacy@mixa.global
Support: hello@mixa.global
Website: https://mixa.global

Shopify App Privacy Policy URL

Recommended public URL:

https://mixa.global/legal/store-policies