Privacy Policy

1. Introduction

4Merchants is a brand of Altruan GmbH ("we", "us", or "our"). Altruan GmbH operates and markets proprietary Shopify applications under the domain https://4merchants.io. This Privacy Policy explains how we collect, use, process, and protect personal data when merchants use our Shopify apps and related services. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Data Controller

The data controller within the meaning of Article 4(7) GDPR is:

3. Information We Collect

3.1 Information You Provide

• Merchant account information (name, email address, business details)
• Store configuration and app settings
• Customer support communications
• Billing and payment information (processed exclusively by Shopify)

3.2 Information Collected Automatically

• Usage data and app interaction logs
• Technical information (IP address, browser type, device information)
• Performance and error logs

3.3 Shopify Store Data

Our apps may access Shopify store data strictly necessary to provide app functionality, including:

• Product information
• Order data
• Customer data (limited to what is required for app features)
• Store settings and configurations

4. Legal Basis for Processing (GDPR)

We process personal data based on:

• Contract Performance (Art. 6(1)(b) GDPR)
• Legitimate Interests (Art. 6(1)(f) GDPR), e.g. security, service improvement
• Consent (Art. 6(1)(a) GDPR), where required
• Legal Obligations (Art. 6(1)(c) GDPR)

5. How We Use Your Information

• Provide, maintain, and improve our Shopify applications
• Enable app functionality and integrations
• Provide customer support
• Analyze usage to improve performance
• Ensure security and prevent fraud
• Comply with legal obligations

6. Information Sharing and Disclosure

We do not sell or rent personal data.

We may share data with:

• Shopify, as platform provider and payment processor
• Cloud and infrastructure providers (e.g. AWS, Google Cloud)
• Analytics and monitoring services
• Customer support tools

Disclosure may also occur if legally required.

7. Data Retention

Personal data is retained only as long as necessary to:

• Provide our services
• Fulfill legal obligations
• Resolve disputes

Upon app uninstallation, data is deleted or anonymized within 30 days, unless legal retention is required.

8. Your Rights Under GDPR

Requests can be sent to info@4merchants.com

9. Data Security

We implement appropriate technical and organizational security measures, including:

• Encryption
• Access controls
• Regular security reviews
• Incident response procedures

10. International Data Transfers

If data is transferred outside the EEA, we rely on:

• EU Standard Contractual Clauses
• Adequacy decisions
• Other GDPR-compliant safeguards

11. Cookies and Tracking Technologies

Our services may use cookies or similar technologies to:

• Maintain functionality
• Analyze usage
• Improve performance

12. Children's Privacy

Our services are not intended for individuals under 16 years of age.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date reflects the current version.

14. Supervisory Authority

You have the right to lodge a complaint with your local EU data protection authority.

15. Contact Information

For any privacy-related questions or to exercise your data protection rights, contact us at: