Last updated: 2026-09-02
Combora is a Shopify app operated by M&A Development. This policy explains what data the app processes, why, and what we deliberately do not collect.
To operate the app we store your shop's myshopify domain, the access session Shopify issues so the app can act on your store, your plan and configuration, the bundles you create, aggregate order facts for your analytics (order totals and discounts — never customer identity), and a technical support log.
No IP addresses, names, emails, browsing identifiers or cookies in our application's records. A shopper who buys without problems leaves no trace in our database; technical error events contain only error codes, HTTP status and product identifiers, and are deleted after 30 days. Our infrastructure providers (hosting, database, email delivery) may process their own transient technical logs.
If you write to us through the support chat inside the app, we store that conversation (subject and messages) linked to your shop's domain so we can help you. When you or we close a conversation, a transcript is emailed to our support inbox and to your shop's contact email through Resend, our email delivery provider; if nobody is online when you write, Resend also delivers an absence notification to us. Closed conversations are deleted 90 days after their last activity, and a shop redaction erases them immediately along with everything else.
This marketing site can use Google Analytics to understand how visitors find Combora and to measure our advertising — only after you accept the consent banner. Declining loads nothing and sets no cookies, and your choice stays in your browser. The app's admin inside Shopify and the storefront widgets never use analytics cookies.
We implement Shopify's mandatory privacy webhooks: customer data requests return nothing to return, and a shop redaction erases every record of your store from our database. Uninstalling the app deactivates processing immediately.
For any privacy question, write to support@combora.app.