Sunpo Apps Privacy Policy

Last updated October 29, 2026.

ZMartin Ventures LLC (“Sunpo,” “we,” or “us”) provides Sunpo: Tile & Area Calculator, Sunpo: Callback Request, Sunpo: Spec Comparison Tables, Sunpo: HTML Sitemap Page, and Sunpo: Careers & Job Listings. This policy describes information processed when a merchant installs or uses an app. Contact us at support@sunpoapps.com.

Merchant and Shopify account information

For each installed app, we store the store’s Shopify domain and ID, its contact email supplied by Shopify, installation and plan status, app settings, and records of basic app activity. Shopify sessions can include staff identifiers, names, email addresses, and locale when Shopify supplies an online session. We encrypt Shopify access and refresh tokens before storing them. Shopify handles app charges; we do not receive merchants’ card or bank details.

We use this information to authenticate the store, provide the app, check its Shopify plan, operate app features, troubleshoot problems, and answer support requests. Activity records are associated with the store and can include a feature action or product ID. We do not sell this information or use it for behavioral advertising.

Shopper information by app

Sunpo: Tile & Area Calculator

The calculator uses measurements entered on a product page to calculate a quantity in the shopper’s browser. Product-page use or add-to-cart can send an event name and product ID through Shopify’s app proxy. Our app database does not store the shopper’s measurements or identity. Product calculator settings are stored in Shopify product metafields; collection defaults and bulk-job status are stored in our database.

Sunpo: Callback Request

A shopper submitting the callback form provides a phone number, preferred contact channel, and time window, and may provide a name. A merchant can configure the form to require a name. The form may also send a product ID and page URL. It does not collect a free-text note. The app creates or updates a customer record in the merchant’s Shopify store and adds callback tags and a note containing the requested time and channel. It also creates an app-owned callback request entry in that store. The app does not call or message the shopper for the merchant.

Our database stores a per-store daily request count and a keyed digest of the phone number for duplicate prevention. The daily job removes old duplicate-prevention digests. For rate limiting, the server holds a keyed digest of the request IP address in process memory. Privacy-job records can contain keyed digests of a customer ID or phone number. Our app database does not store the submitted name, phone number, or request details. The merchant controls the Shopify customer record, including its callback notes and tags.

Sunpo: Spec Comparison Tables

Product specifications and comparison settings are stored in the merchant’s Shopify store as metafields and metaobjects. CSV contents are processed for import or export and are not saved as files in our database. Our database stores import-job status, counts, and errors, which can include product handles. The app does not intentionally collect shopper identities.

Sunpo: HTML Sitemap Page

The sitemap uses the merchant’s Shopify store content to render links to public products, collections, pages, and articles. The app does not intentionally collect shopper identities or copy a catalog into our database.

Sunpo: Careers & Job Listings

Merchants create job listings as Shopify Pages with job details stored in Shopify page metafields. Our database keeps an index of job titles, page handles, status, and closing dates to help the app display and expire listings. A Shopify app metafield stores public list information such as department and location. Applicants use the merchant’s email address or external application link; the app does not receive applications or résumés. It does not intentionally collect shopper or applicant identities.

Hosting and other services

Our app servers and Postgres databases run on a DigitalOcean server in the United States. Shopify stores the Shopify customer records, metafields, and metaobjects described above. Cloudflare provides DNS for our domains and forwards mail sent to support@sunpoapps.com to our support inbox. If you contact support, we receive your email address and message so we can reply. Weekly DigitalOcean droplet backups are enabled. A separate encrypted offsite database backup has not yet been verified.

Retention and deletion

We keep app database records while an app is installed. On uninstall, the app removes its stored Shopify sessions and stops using the store. Shopify’s subsequent shop-redaction notice triggers deletion of remaining app database records for that store, including the Careers job index. Callback duplicate-prevention digests, app-owned request entries, and protected-access audit events are subject to cleanup jobs. Server logs rotate by size; we do not promise a fixed time limit for their deletion. Job Pages and their metafields remain in the merchant’s Shopify store, where the merchant controls them.

Callback customer records, notes, and tags in the merchant’s Shopify store can remain after uninstall. App-owned callback request entries may be removed by Shopify. While the app remains installed, its customer-redaction handler attempts to delete matching app-owned entries and remove app-written callback note lines and tags; failed writes remain queued for retry. Merchants can also manage customer records in Shopify.

Requests and contact

Merchants and shoppers can email support@sunpoapps.com about information processed by Sunpo. Shoppers should also contact the merchant whose store received their information, because the merchant controls the Shopify customer record. We will review applicable access and deletion requests and work with the merchant and Shopify as needed. Callback request records can be viewed and managed in the merchant’s Shopify admin. The callback app provides an authenticated merchant export of matching request records; a Shopify customer-data request still requires review and delivery to the merchant, and that end-to-end process has not yet been verified.

We may update this policy as the service changes. The date above will change when we do. The apps are intended for merchants and are not directed to children.