Privacy Policy

ProofMark is a Shopify application operated by FusionTech Africa. ProofMark is designed to minimize the collection and processing of personal data while providing Certificate of Authenticity generation and verification services to Shopify merchants.

Information ProofMark processes

ProofMark processes only the Shopify store, order, line-item, product and certificate identifiers required to determine whether a purchased product is protected and to issue, manage and verify an authenticity certificate.

ProofMark does not intentionally store customer names, customer email addresses, telephone numbers, billing addresses or shipping addresses.

Standard infrastructure and security logs may contain technical information such as IP address, timestamp, browser or user-agent information and requested URLs. These logs are used only for security, troubleshooting and service operation.

How the information is used

ProofMark uses data only to:

• identify products selected by a merchant for ProofMark protection;
• issue a unique Certificate of Authenticity after an eligible paid order;
• prevent duplicate certificate issuance;
• display certificate status and verification;
• manage certificate revocation where the merchant's plan supports it;
• enforce subscription features and monthly certificate limits; and
• maintain service security and troubleshoot technical problems.

ProofMark does not use customer data for advertising, behavioural profiling, credit decisions or automated decisions that produce legal or similarly significant effects.

Data retention

Order IDs, order line-item IDs and order confirmation numbers have a 30-day retention period measured from certificate creation. Scheduled cleanup removes these references on the first run after that period. Certificate numbers, product information, verification tokens, status and issue dates remain available for certificate verification.

Certificate data required for ongoing authenticity verification may remain for as long as the certificate needs to remain verifiable, including when a certificate has been revoked.

Sharing and sale of data

ProofMark does not sell merchant or customer data and does not share it for advertising.

Data may be processed by service providers used to operate ProofMark, such as hosting, database, infrastructure and support providers, only as necessary to provide and secure the service. Shopify also processes information according to its own privacy terms when merchants and customers use Shopify services.

Security

ProofMark uses HTTPS/TLS for data transmitted between browsers, Shopify and the ProofMark service. Access to production systems and databases is restricted to authorized administration and application processes. ProofMark follows data-minimization principles and avoids retaining customer identity fields that are not required for the service.

Shopify privacy requests

ProofMark supports Shopify's mandatory privacy and redaction webhooks, including customer data requests, customer redaction and shop redaction requests.

Because ProofMark does not intentionally store customer identity fields, a customer-level redaction request will normally involve little or no customer identity data within ProofMark. Where applicable, data is handled in accordance with Shopify's privacy request workflow.

Your choices and questions

Merchants may contact ProofMark with questions about privacy, data handling, access, correction or deletion requests. Some records may need to be retained where required for security, fraud prevention, legal obligations or continued certificate verification.

Contact

Privacy and support inquiries: contact@fusiontech-africa.com

Operator: FusionTech Africa