Privacy, measured precisely.

1. Who we are

Hubnar ("we", "us") is operated by Ronevy LLC, a Wyoming limited liability company. We provide server-side Google Ads conversion tracking for Shopify stores. For any privacy matter, contact [email protected].

2. Information we collect

Merchant data

• Store information: your .myshopify.com domain, store settings within Hubnar.
• Google Ads connection: your Google Ads customer ID and the OAuth tokens you authorize — stored securely, used only to send conversions to your own account.
• Support communication when you contact us.

Store visitor & customer data

• Ad click identifiers (gclid, gbraid, wbraid) present in the URLs of visitors arriving from ads, held with a first-party identifier for up to 30 days for attribution.
• Order data received from Shopify when a purchase happens: order value, currency, and — solely for Google's enhanced conversion matching — customer email, phone and address, which are hashed with SHA-256 before they leave our systems for Google.

We do not collect data from your visitors for advertising of our own, and we never sell data to anyone.

3. How we use it

Data is used to: (a) attribute your store's orders to your Google Ads campaigns and report them as conversions, (b) show you attribution insights inside the app, (c) operate, secure and support the service. We do not use your customers' data for marketing, profiling beyond attribution, or any purpose unrelated to the service.

4. Shopify permissions we request

• read_orders — receive new orders so conversions can be attributed and reported.
• read_checkouts — track begin-checkout events for full-funnel reporting.
• read_customers — build hashed identifiers for Google's enhanced conversions.
• read_customer_events / write_pixels — operate the checkout web pixel that captures events.
• read/write_script_tags — install the storefront tracking on stores where the theme-embed path isn't available.
• read_themes — verify that tracking is active on your theme.

5. Who we share data with

• Google — conversions are sent to the Google Ads account you connected, via Google's official APIs. Customer identifiers are SHA-256-hashed before transmission.
• Hosting infrastructure — the service runs on secure cloud infrastructure with encryption in transit. The specific hosting provider and data region are confirmed at launch and listed here.
• Legal requirements — only if validly compelled by law, and we'd tell you unless prohibited.

6. Retention & deletion

Click identifiers are retained for the 30-day attribution window. Order and conversion records are retained while you use the service so your reporting stays accurate. Deletion runs on Shopify's mandatory compliance webhooks, which Hubnar implements and verifies:

• Customer deletion — when a store customer requests erasure, Shopify sends a customers/redact request and Hubnar removes that customer's personal data (email, phone, name, address) from its records.
• Store deletion — 48 hours after you uninstall, Shopify sends a shop/redact request and Hubnar deletes your store's data from its systems.
• Data access — a customers/data_request lets a merchant retrieve what data is held for one of their customers.

Every request is HMAC-verified and completed within Shopify's 30-day window. See our data deletion page for exactly how each request works.

7. Your rights (GDPR / CCPA)

Depending on your jurisdiction you may have the right to access, correct, delete, restrict or port personal data, and to object to processing. Exercise any of these via [email protected] (subject: DATA REQUEST). We respond within 30 days. Store customers can also route requests through their merchant via Shopify's privacy tools — that reaches us automatically.

8. Security

All traffic is encrypted with TLS. Customer identifiers are SHA-256-hashed before any transmission to Google. Shopify webhooks are HMAC-verified before processing. Access to production systems is restricted and credentialed.

9. International transfers

Data may be processed in datacenters outside your country. Where GDPR applies, transfers rely on appropriate safeguards. [REGION DETAILS — finalized at launch.]

10. Children

Hubnar is a business tool for merchants and is not directed at children under 16. We do not knowingly process children's data beyond what appears in ordinary order records.

11. Changes to this policy

If we make material changes, we'll update the date at the top and notify merchants in the app. Continued use after changes means acceptance.

12. Contact

Ronevy LLC · a Wyoming limited liability company · [email protected]