Privacy Policy

1. Introduction

Afforestation ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.

2. Information We Collect

We collect minimal data necessary to provide our tree-planting service:

• Store Information: Your Shopify store domain and name
• Order Data: Order totals (not customer personal information) to calculate tree contributions
• App Settings: Your configured preferences for tree planting triggers

We do NOT collect or store: Customer names, emails, addresses, payment information, or any other personally identifiable customer data.

3. How We Use Your Information

We use the collected information to:

• Calculate the number of trees to plant based on your orders
• Display impact statistics on your storefront widgets
• Generate sustainability reports for your business
• Improve and optimize our services

4. Data Storage and Security

We implement industry-standard security measures:

• All data is encrypted at rest and in transit (TLS 1.3)
• Data is stored in secure, SOC 2 compliant cloud infrastructure
• Regular security audits and monitoring
• Access controls and authentication for all systems

5. Data Retention

We retain your data for as long as your app is installed. Upon uninstallation, we retain aggregated, anonymized impact data for reporting purposes. Personal store information is deleted within 30 days of uninstallation upon request.

6. Data Sharing

We do not sell your data. We may share data only with:

• Tree-planting partners (only aggregated tree counts, no store data)
• Service providers who assist in operating our app (under strict confidentiality)
• Legal authorities when required by law

7. Your Rights

You have the right to:

• Access your stored data
• Request data correction or deletion
• Export your impact data
• Withdraw consent at any time by uninstalling the app

8. GDPR Compliance

We comply with the General Data Protection Regulation (GDPR). We process data based on legitimate interest and consent. EU users can request data access, portability, or erasure by contacting us.

9. Contact Us

For privacy-related inquiries, contact us at:
privacy@afforestation.org

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.