Earned Reach Privacy Policy

Last updated: August 26, 2026

Earned Reach provides performance-based referral and promoter tracking tools for Shopify merchants. This Privacy Policy explains what information Earned Reach processes when a merchant installs and uses the application.

Information We Process

Earned Reach processes information necessary to provide campaign, promoter, referral-code, sales-attribution, commission, and refund tracking features.

This may include:

• Shopify store domain and installation/session information
• Campaign names and commission settings
• Promoter names, email addresses when provided, and referral codes
• Shopify order identifiers and order numbers
• Attributed order values, discounts, commissions, and payment status
• Refund identifiers and refund amounts

Earned Reach does not intentionally store customer names, customer email addresses, shipping addresses, billing addresses, phone numbers, or payment-card information.

How Information Is Used

Information processed by Earned Reach is used to:

• Operate referral and promoter campaigns
• Create and associate referral discount codes
• Attribute eligible Shopify orders to promoters
• Calculate promoter commissions
• Track commission approval and payment status
• Detect refunds that may require commission review
• Maintain and secure the application

Data Sharing

Earned Reach does not sell merchant or customer data. Information may be processed by service providers necessary to operate the application, such as Shopify and application hosting and database providers.

Data Retention and Deletion

Earned Reach retains store, campaign, promoter, order-attribution, commission, and refund information only for as long as it is reasonably necessary to provide the service and maintain the merchant's referral and commission records.

When Shopify sends a customer-redaction request, Earned Reach deletes stored order-attribution and refund information associated with the Shopify order identifiers included in that request.

When Shopify sends a shop-redaction request following an app uninstall, Earned Reach deletes stored campaign, promoter, attributed-sale, refund, and session data associated with that shop.

Earned Reach does not intentionally retain customer names, customer email addresses, phone numbers, billing addresses, shipping addresses, or payment-card information.

Security

Reasonable administrative and technical safeguards are used to protect information processed by Earned Reach. No method of electronic transmission or storage can be guaranteed to be completely secure.

Changes to This Policy

This Privacy Policy may be updated as Earned Reach changes. The updated date shown at the top of this page will reflect the most recent revision.

Contact

For privacy questions or requests, contact: moonlitmagic@velvetalchemystudio.com