Privacy Policy

TrueSource Order Attribution (“TrueSource”, “we”, “our”, or “us”) provides marketing attribution, order tracking, and analytics services for Shopify merchants. This Privacy Policy explains how we collect, use, and protect information when you install and use our app.

Information We Collect

When you install and use the app, we collect and store information necessary to provide accurate attribution modeling. This includes:

• Merchant Data: Shop name, shop domain, and shop owner contact information provided by Shopify.
• Order & Transaction Data: Information needed to link attribution responses and tracking data to specific orders (Order IDs, revenue, and product titles).
• Customer Survey Data: Direct responses to the “How did you hear about us?” question shown on the thank-you page.
• Technical Tracking Data (v2): To provide hybrid attribution, we collect non-personal browser data via Shopify-own pixel api. This includes referral URLs, UTM parameters, device type, and masked session identifiers.
• Subscription Data: Billing status and plan information.

Note: We do not collect or store full IP addresses, payment card data, or customer login credentials.

How We Use Information

We use the collected information solely to:

• Generate hybrid attribution reports and analytics for the merchant.
• Bridge the gap between technical click-tracking and customer-reported discovery sources.
• Identify wasted marketing spend across various channels (TikTok, Facebook, Google, etc.).
• Maintain app functionality and provide technical support.
• Comply with Shopify’s security and data protection requirements.

Data Sharing & Third Parties

We do not sell, rent, or share personal data with third parties for their own marketing purposes. Data is processed only within authorized systems required to operate the app (such as secure cloud hosting).

Data Storage and Security

All data is stored securely using industry-standard encryption. We limit data access to authorized systems and personnel. We utilize Shopify’s secure API environment to ensure that customer data is handled with the highest level of security.

Data Retention & Deletion

We retain data only as long as the merchant’s account is active. When the app is uninstalled, associated shop data is deleted or anonymized in accordance with Shopify’s data retention timelines. We strictly adhere to Shopify’s mandatory privacy webhooks:

• customers/data_request: To retrieve personal data upon request.
• customers/redact: To delete customer-specific data.
• shop/redact: To purge all shop-related data after uninstallation.

Merchant and Customer Rights

In accordance with the GDPR, CCPA, and other global privacy laws, users have the right to access, correct, or request the deletion of their data. As we only store data to show site owners their own business insights, any customer requests received by the merchant can be processed through our app settings or by contacting us.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our tracking technology or regulatory requirements. Any updates will be posted on this page.

Contact

If you have questions regarding our data practices or v2 hybrid tracking, please contact us at:

Email: smjaber24@hotmail.com

Last updated: April 2026