App Partner MarketplacePOLICIES

CLEAR TERMS. SHARED UNDERSTANDING.

Privacy Policy

How account, request, store, and payment information supports your partnership.

Effective October 19, 2026 · Operator: Frank Fan

1. Who operates this service

Frank Fan operates App Partner Marketplace at shopifyappshare.com. This policy describes information handled through the marketplace, partner workspace, app requests, and related support. Contact service@winwithfrank.com about privacy or your information. An underlying Shopify app may have its own privacy policy covering its use inside a merchant’s store.

2. Information we handle

We handle information you provide and records generated when you use the service:

  • Account information: your authentication identifier, name, email address, account status, and workspace permissions.
  • Partner profile: your name or agency name, contact details, bio, specialties, languages, professional links, and any optional photo, experience, country, or store details you provide.
  • App requests and support: reference app links, feature requirements, store domains, screenshot links, notes, replies, status updates, and agreed program details.
  • Program and financial records: accepted terms and rates, referral and installation attribution, app subscription and collected-revenue records, refunds, commission entries, adjustments, and transfer or payout references when those features are used.
  • Technical and security records: request and error logs, timestamps, session identifiers, and audit records. Our hosting and authentication providers may process IP addresses and browser or device information to deliver and protect the service.

Only submit client information you are authorized to share. Do not include passwords, access tokens, payment-card details, customer lists, or other unnecessary sensitive information in requests, screenshots, or messages.

3. Google sign-in

If you choose Google sign-in, Google shares the basic identity information you authorize with our authentication provider, Clerk. The configured permissions are OpenID, email address, and basic profile information, which can include your name and profile picture. Our application stores the account identifier, name, and email needed to recognize your account; Clerk processes the sign-in connection and session.

We use this information to create or access your account, identify your workspace, and protect access. Google sign-in does not give this marketplace access to your Gmail messages, Google Drive files, or Google Contacts. We do not sell Google sign-in information or use it for advertising.

You can review or remove the connection in your Google Account connections. Removing Google access does not automatically delete records already stored in the marketplace; contact us to request deletion.

4. How we use information

  • Authenticate users and enforce account, role, and organization permissions.
  • Save profiles, evaluate app requests, communicate about builds, and manage partner agreements.
  • Attribute eligible referrals and installations, reconcile collected revenue, calculate commissions, and show payment history.
  • Provide support, investigate abuse and errors, maintain security, and resolve attribution or accounting disputes.
  • Maintain records needed for accounting, applicable obligations, and the operation of the service.

5. Who receives information

Authorized platform administrators can access information needed to operate and support the service. An app’s authorized developer or organization may receive the partner, store, and performance information needed for its program. Access is scoped to the relevant account or organization; submitting a profile does not by itself publish it as a public directory listing.

We use service providers for specific functions: Clerk for account authentication, Vercel for hosting and file storage, Neon for the hosted database, and Resend for operational email such as administrator sign-in codes. Google processes Google sign-in under its own policies. These providers process the information needed for their services.

When Shopify integrations are enabled and authorized, Shopify and the relevant app exchange store identity, installation, subscription, and billing evidence used by the program. When Stripe Connect payouts are enabled, Stripe handles its hosted onboarding and payment services, including identity and bank information it requests. The marketplace keeps connected-account status and financial references; do not send bank details through app-request messages. An available integration screen is not evidence that a live integration or payment is active.

We may disclose information when required by applicable law or when reasonably necessary to investigate fraud, protect the service, or resolve a dispute. We do not sell personal information or share Google sign-in information for advertising.

6. Cookies and browser storage

Authentication and security features use cookies or similar storage to maintain sessions and protect sign-in. A supported referral flow also uses a cookie to associate an eligible referral with an app. Its expiry follows that program’s attribution window, initially 30 days; an installation confirmation cookie lasts about five minutes. Blocking these cookies can affect sign-in or referral attribution.

Profile and app-request forms can save drafts in your browser’s local storage so you can return to unfinished work. Drafts are associated with your account in that browser and are normally removed after a successful submission. They may remain on the device until submitted or cleared through browser site-data settings. Avoid saving confidential material on a shared device.

7. Retention and protection

We retain information for as long as needed to provide the service, maintain the account, reconcile financial records, resolve disputes, and meet applicable obligations. Financial, agreement, audit, fraud-prevention, and backup records may need to remain after an account closes. There is not currently an automatic deletion schedule covering every record type.

We use access restrictions, authenticated requests, encrypted connections, and encryption for stored integration credentials. No system can guarantee absolute security. Service providers may process or store information in countries other than your own; the location depends on the provider and configured service.

8. Your choices and requests

You can edit the available profile fields in your workspace, sign out, clear locally saved drafts through your browser, and manage the Google connection in your Google Account. To request access to, correction of, or deletion of your marketplace information, or to close your account, email service@winwithfrank.com.

We may verify the request before disclosing or changing account information. We will explain when information must be retained for accounting, security, disputes, or applicable obligations. Deleting an authentication account alone may not remove linked marketplace records. Privacy rights and available remedies depend on the laws that apply to you.

9. Audience and policy changes

This service is intended for adult business users and is not directed to children. Please contact us if you believe a child has provided personal information.

We will post an updated policy when our practices change. If a new use of Google information requires additional authorization, we will request it before that use. Questions about this policy can be sent to service@winwithfrank.com.