AffiliateStar — Terms of Service
Last updated: 1 September 2026
These terms govern use of the AffiliateStar app ("the app") provided by Appify Market ("we", "us"). Installing the app means agreeing to them.
Section 10 is a Data Processing Agreement. It is the part that matters for privacy law and for Shopify's protected customer data requirements, and it takes effect automatically on install — there is nothing separate to sign.
1. The service
AffiliateStar lets a Shopify merchant run an affiliate program: affiliates register through a hosted portal, receive tracked links and discount codes, and earn commission on orders attributed to them. Merchants approve affiliates, review commissions, and issue payouts.
2. Who the parties are
- You / the merchant — the Shopify store that installs the app.
- Affiliates — people who join your program through the portal. They are your partners, not ours. We provide the software; the commercial relationship is between you and them.
- Shoppers — your customers. We have no relationship with them.
3. Your responsibilities
You are responsible for:
- The terms of your own affiliate program, including commission rates, and for honouring them.
- Paying your affiliates. We never hold, transfer, or take custody of your money. Store credit payouts are Shopify gift cards issued on your own store; every other method is something you carry out yourself.
- The content of your program terms, portal branding and creative assets, including having the right to use anything you upload or link to.
- Complying with the advertising and disclosure laws that apply to affiliate marketing where you and your affiliates operate.
4. What we provide, and what we do not
The app calculates commission from order data Shopify sends us, using the rules you configure. We take reasonable care that those calculations are correct, and the calculation logic is tested.
We are not an accounting system and not a payment processor. The commission ledger is a record of what your program produced, not tax advice, and not proof of payment. Reconcile it against your own records before relying on it.
Attribution depends on data outside our control — cookies the shopper may block, scripts a theme may prevent from running, and checkout paths that bypass the cart. We use several methods to reduce this, but we cannot guarantee that every referred order is attributed.
5. Fees
Billed through Shopify's managed pricing at the plan you select. Plans differ only in how many affiliates you may approve.
We charge no percentage of your sales or of affiliate-driven revenue, on any plan. If that ever changes, existing subscribers will be told before it applies to them.
Exceeding your plan's affiliate limit prevents you approving new affiliates. It does not stop tracking, commission, or payouts for affiliates you already have.
6. Acceptable use
Do not use the app to run a program that pays for fraudulent orders, to deceive your affiliates about what they will be paid, or to collect personal data through the portal beyond what the app asks for. Do not attempt to access another merchant's data.
7. Availability
We aim for high availability but do not promise uninterrupted service. Webhooks may be delayed by Shopify or by us. Where a delay causes commission to be recorded late, it is recorded late rather than lost — the ledger is idempotent and reprocesses safely.
8. Liability
To the fullest extent the law allows, our total liability for any claim arising from the app is limited to the fees you paid us in the twelve months before the claim.
We are not liable for commission you paid an affiliate in reliance on the app, or for revenue you believe went unattributed. Verify payouts before making them.
9. Termination
You may uninstall at any time. We may suspend or terminate access for breach of these terms, or if required by Shopify or by law.
On uninstall, your data is handled as described in §10.6 and the Privacy Policy.
10. Data Processing Agreement
This section applies where we process personal data on your behalf. You are the controller; we are the processor.
10.1 What we process, and why
Solely to provide the app:
| Category | Data | Whose |
|---|---|---|
| Affiliate account | Name, email address, payout email, terms acceptance | Your affiliates |
| Order attribution | Order ID and number, subtotal, line items, discount codes, Shopify customer ID | Your shoppers |
| Click tracking | Hashed IP address, hashed user-agent, referring page, landing page, timestamp | Visitors to your store |
We do not process shopper names, email addresses, phone numbers or postal addresses. The app does not request the Shopify permissions that would allow it.
IP addresses are never stored in their original form. They are hashed with a secret unique to your store, so hashes cannot be compared across stores or reversed with a precomputed table.
10.2 Our obligations
We will:
- Process personal data only on your documented instructions, which these terms and your use of the app constitute.
- Not use it for our own purposes, and never sell it or share it with advertisers or data brokers.
- Keep it confidential and limit access to personnel who need it to operate or support the app.
- Apply appropriate technical and organisational security measures, including encryption in transit and at rest.
- Assist you in responding to requests from individuals exercising their rights.
- Notify you without undue delay after becoming aware of a personal data breach affecting your data.
- Make available the information needed to demonstrate compliance with this section.
10.3 Consent
Where the law requires consent before storing non-essential cookies, the app's storefront script asks Shopify's Customer Privacy API before setting its attribution cookie, and clears that cookie if consent is withdrawn.
Presenting a consent banner, and configuring it, remains yours as the store operator.
10.4 Sub-processors
We use:
| Sub-processor | Purpose |
|---|---|
| Our cloud hosting provider | Running the application |
| Our database provider | Storing the data described in §10.1 |
| Our transactional email provider | Sending affiliate sign-in links and notifications |
We remain responsible for their acts and omissions. We will give notice of a change of sub-processor, and you may object on reasonable data protection grounds — in which case you may terminate.
10.5 Individual rights
Requests from shoppers reach us through Shopify's compliance webhooks and are handled automatically:
- Data request — we report what we hold for that person.
- Deletion — we erase their name, email, payout details and click data. We retain commission amounts, without anything identifying attached, because they are your financial records and not the individual's to erase.
Affiliates may contact you or us directly and are handled on the same basis.
10.6 Retention and deletion
| Event | What happens |
|---|---|
| While installed | Data retained for as long as your program needs it |
| Uninstall | Access tokens deleted immediately; program data briefly retained so a reinstall does not lose your history |
| 48 hours after uninstall | Everything for your store is deleted permanently — affiliates, codes, clicks, commissions, payouts, sign-in tokens and sessions |
10.7 International transfers
Data may be processed outside your country. Where transfer safeguards are required, we rely on the appropriate mechanism for the jurisdictions involved.
11. Changes to these terms
We will post changes here and update the date above. Material changes will be sent to the email Shopify holds for your store. Continuing to use the app after a change means accepting it.
12. Affiliates using the portal
If you are an affiliate rather than a merchant: your agreement about commission is with the merchant whose program you joined, not with us. We provide the portal and the records. Questions about whether or how much you are paid go to the merchant.
We will erase your personal data on request — see §10.5.
13. No warranty
The app is provided "as is", without warranties of any kind to the extent the law allows.
14. Governing law
These terms are governed by the laws of the State of New York, United States, without regard to its conflict of law rules. The state and federal courts located in New York have exclusive jurisdiction over any dispute arising from them.
15. Contact
Appify Market
16 Longview Ave
Valley Stream, NY 11581
United States