Privacy Policy
This policy explains how Leowen Technologies Inc., a company incorporated in British Columbia, Canada, collects, uses and protects personal information through our website at leowentech.com (the "Site") and the software applications we publish for merchants, including applications listed on the Shopify App Store (the "Apps"). We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA). Where our merchants serve customers in the European Economic Area or the United Kingdom, we act as a processor on their behalf under the GDPR and UK GDPR.
1. Information we collect
Website visitors. The Site does not use analytics cookies or tracking pixels. Our hosting provider, Cloudflare, records standard server logs (IP address, browser type, requested page, timestamp) for security and performance purposes. If you email us, we keep the correspondence.
Merchants using our Apps. When a merchant installs an App, Shopify shares the store's name, domain, contact email and the specific data scopes the merchant approved during installation. Depending on the App, this may include order, payout, refund, dispute, product and customer records needed to perform reconciliation and attribution. We only request the scopes an App needs to function.
Merchants' customers. Through the Apps we may process personal information about a merchant's customers (such as name, email, shipping address and order history) solely on the merchant's behalf and under the merchant's instructions. We do not use this information for any purpose of our own and we never sell it.
2. How we use information
- To provide, operate and improve the Apps, including generating reports, reconciling payouts and syncing entries to accounting systems the merchant connects.
- To communicate with merchants about their account, support requests, security notices and material changes to the Apps.
- To detect abuse, secure our systems and comply with legal obligations.
We do not use merchant or customer data to train machine-learning models, and we do not share it with third parties for advertising.
3. Sharing and sub-processors
We share information only with service providers who help us run the Apps, under written agreements that limit their use of the data: cloud infrastructure providers, email delivery providers, and the accounting platforms (such as QuickBooks or Xero) that a merchant explicitly connects. We may also disclose information when required by law or to protect our rights. A current list of sub-processors is available on request.
4. Where data is stored
Our production systems are hosted with cloud providers in Canada. Some service providers may process data in the United States. Where personal information leaves Canada, we use contractual safeguards appropriate to the destination.
5. Retention and deletion
We keep merchant data for as long as the App is installed and for up to 30 days after uninstallation, after which it is deleted from our production systems, except where a longer period is required by law (for example, financial records retained for tax purposes). Backups are purged on a rolling basis within 90 days.
We honour Shopify's mandatory privacy webhooks. When a merchant or Shopify sends a customer data request, customer redaction request or shop redaction request, we respond within the timeframes Shopify requires.
6. Security
Data is encrypted in transit (TLS) and at rest. Access to production data is limited to personnel who need it, protected by multi-factor authentication and logged. We never receive or store full payment card numbers; card processing is handled entirely by Shopify and its payment processors.
7. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal information, or withdraw consent to its use. If you are a customer of a merchant that uses our Apps, please contact the merchant directly; we will assist them in fulfilling your request. To exercise your rights with us, email leo@leowentech.com. You may also complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.
8. Children
The Site and Apps are intended for businesses and are not directed at children under 16. We do not knowingly collect personal information from children.
9. Changes
We may update this policy from time to time. Material changes will be announced on this page and, for merchants, by email. The effective date at the top shows the latest revision.
10. Contact
Leowen Technologies Inc.
Richmond, British Columbia, Canada
leo@leowentech.com