Privacy policy
Last updated: October 8, 2026
TrueBuyer is a Shopify app published by ETS IA AFRIKA AGENCY (Cameroon). It sends your store's orders to Meta, first as a “Lead” when the order is created, then as a “Purchase” when you mark it delivered. This page explains what data we process and how long we keep it.
1. Who is responsible
For your customers' data, you (the merchant) are the data controller and we act as a processor, only to run the app. For merchant data (account, store), we are the controller.
2. Data we process
Data of your store's customers (received from Shopify and the pixel)
- Name, phone, email and city from the order.
- IP address, user agent, and Meta identifiers fbc / fbp.
- Amount, currency, status and dates of the order.
We do not store the full address or any payment data. The personal fields above are encrypted at rest.
Merchant data
- Store domain, Shopify access token, name and email of the account that installed the app.
- The Meta Pixel ID and Meta access token you provide.
- Subscription status, and a technical access log (order IDs, no name or contact).
3. What is sent to Meta
Through Meta's Conversions API: phone and email hashed with SHA-256, IP address, user agent, fbc, fbp (in clear, as Meta requires), plus the amount and currency. Name and city are not sent. Meta then processes this data under its own policy.
4. Retention
| Data | Retention |
|---|---|
| Pixel captures (IP, user agent, fbc, fbp) | 30 days, then deleted |
| Personal data on orders | 12 months, then anonymized (the row stays, without personal data, because it counts toward your quota) |
| Technical access log | 12 months, then deleted |
| Shopify sessions | Deleted on uninstall |
| All other store data | Deleted about 48 hours after uninstall (Shopify “shop/redact” request) |
5. Your rights and your customers' rights
We handle access, correction and deletion requests relayed by Shopify (“customers/data_request”, “customers/redact”) or sent directly to support@gettruebuyer.com. A deletion request anonymizes the related orders. We reply within 30 days.
6. Sub-processors
- Shopify: installation and billing platform.
- Meta: recipient of conversion events.
- Server hosting provider (VPS): hosts the application and its database.
We do not sell any data and do not use it for any other purpose.
7. Security
Encrypted connections (HTTPS), encryption at rest of personal order data, signature check on every Shopify webhook, restricted server access.
8. Contact
ETS IA AFRIKA AGENCY, Cameroon · support@gettruebuyer.com