Privacy Policy

This Privacy Policy describes how SPEUX E.I.R.L. (“Zentro”, “we”) processes the personal data it receives through its Cash on Delivery (COD) order management SaaS platform, available at https://zentro.one, and through the Zentro Shopify app.

1. Data Controller

Legal name: SPEUX E.I.R.L.
Tax ID (RUC): 20607072168
Registered address: Cal. Calle 1 Mz. A2 Lote 20, Urb. Alameda Salaverry, Miraflores, Arequipa, Perú
Privacy officer email: privacy@zentro.one

Zentro acts as data controller regarding subscriber (merchant) data, and as data processor regarding end-customer data that merchants store and manage through the platform, including data that comes from their Shopify stores.

2. Data we collect

2.1 Merchant account data

• User name, email and password (bcrypt hash).
• Merchant's business name, tax ID and organization details.
• If you install Zentro from Shopify, the store data that Shopify provides and that we use to create your account: the store name, its owner's name and email, its country, its currency and whether it is a development store.
• Access logs, audit events, and IP addresses.

2.2 Order data (merchant's end-customers)

• Name, phone, and national ID (when provided by the end-customer).
• Delivery address, region, province, district, coordinates.
• Order history, amounts, payment proofs, and shipping status.
• WhatsApp conversations with the merchant, when they connect their WhatsApp Business account (section 12) or a messaging provider they contract themselves, such as Pancake.

What we receive from a Shopify store, and what Zentro changes in it, is described in section 9.

2.3 Third-party integration data

We request the minimum permissions required. Full per-integration breakdown appears in sections 9 through 13 of this policy.

3. How we use the data

• Operate and maintain the order management platform.
• Let the merchant confirm each order with the buyer, by phone or WhatsApp, and arrange delivery.
• Sync shipment status with integrated couriers.
• Generate operational and commercial reports for the merchant.
• Let the merchant serve their customers over WhatsApp from Zentro.
• Detect and prevent fraud or service abuse.
• Comply with applicable legal obligations.

We do not sell, rent, or share merchant or end-customer data with advertisers, data brokers, ad networks, or third parties for purposes other than those stated here. The only exception is the measurement of our own ads described in section 14: which you can turn off, and never with data about your store’s end customers. Nor do we use your customers' data to train artificial intelligence models.

4. Sub-processors and recipients

Zentro uses the following providers to operate the service. All are contractually bound by confidentiality and security obligations equivalent to those described in this policy:

For your own Zentro account we also use Stripe (United States), which bills the subscription of merchants who sign up directly with Zentro; Shopify, which bills merchants who install the app from Shopify; Calendly (United States), which schedules your onboarding session; and Discord (United States), where our team is notified of each new trial and subscription with the company name, the plan, the contact's name, email and WhatsApp number, and their Shopify store. They process your data as a Zentro customer, never your store’s end customers’ data.

Recipients you choose. When you use an integration, Zentro sends the data that integration needs, on your instructions:

• Couriers you connect (for example Shalom, Olva, Aliclick, Eva, Dinsides, Swayp, Urpi, Fenix, GSGCorp, LBEX, Rust, Dropi or Zeus): the recipient's name and phone, their ID number when the courier requires it, the delivery address or pickup agency, the products and the amount to collect.
• Google spreadsheets of couriers that work that way (Urpi, Fenix), with the same shipping data.
• Your WhatsApp Business account (Meta), through which messages to your buyers are sent (section 12).
• CRM and point-of-sale systems you connect (for example Pancake, SendyPro, Whaticket or Flujos Inteligentes): the order and conversation data that integration syncs.

Each of them processes that data under its own terms, which you accept when you hire it.

5. Security

We apply reasonable technical and organizational measures to protect data:

• In transit: every connection uses HTTPS (TLS 1.2 or higher) with HSTS, and the database only accepts encrypted connections.
• At rest: the database and its backups are encrypted by our provider with AES-256. In addition, we encrypt with AES-256-GCM, before storing them, the access tokens for Shopify stores and those for Meta, WhatsApp, Google, TikTok and most couriers.
• Role-based access control (RBAC): ADMIN, SUPERVISOR, SELLER, LOGISTICS and MOTORIZADO (delivery rider), each with the minimum permissions for its job; for example, a rider only sees the orders of their couriers that are assigned to them.
• Multi-tenant isolation: every query filters by organization; merchant data never crosses tenants.
• Audit logs of sensitive changes, kept for 90 days, and an access log of your buyers' data: who viewed it, in which part of Zentro and in which hour, which we keep for 365 days.
• Our team's access: only authorized support staff can enter a merchant's account, for a limited time (one hour by default), stating the reason, and each entry is recorded in that account's audit history.

6. Retention

• While your account exists we keep your orders and your customers' data, because they are your operating history and the basis of your reports, collections and commissions.
• If you cancel your subscription, your account is suspended, with its data, so you can reactivate it. If you ask us to delete it, we do so within 30 days, except for what the law requires us to keep (see Data Deletion).
• Stores connected through the Shopify app: uninstalling it triggers what section 9.5 describes, without you having to ask.
• Audit logs: 90 days.
• Backups: the database keeps a 7-day history to recover from errors. We also take point-in-time copies of the database (for example, before changing its structure) that currently do not expire on their own: we delete them in a periodic manual cleanup. Until that cleanup, data we delete may remain in one of those copies, which we only use to restore the service after an error.

7. Your rights (Peru Law 29733, GDPR/CCPA)

As a data subject you have the right to:

• Access: know what data we process about you.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your data.
• Object: object to specific processing.
• Portability: receive a structured copy of your data.

To exercise these rights, write to privacy@zentro.one or follow the instructions at Data Deletion. We respond within the deadlines of the Peru Law 29733 regulation: 8 business days for information requests, 20 for access and 10 for rectification, erasure or objection. If you are a store's customer, you can also ask that store directly. EU residents may also lodge complaints with their local Data Protection Authority.

8. International data transfers

Some of our sub-processors operate outside Peru, mostly in the U.S. (the table in section 4 shows where each one operates). We only transfer to them the data needed to provide the service. The providers of the infrastructure where the data is hosted, Vercel and Neon, hold SOC 2 and ISO 27001 certifications.

9. Data from Shopify

Zentro connects to a Shopify store in two ways. In both, the merchant authorizes the permissions on Shopify's consent screen before we receive any data:

• The Zentro Shopify app, which the merchant installs from Shopify. It is a single app for all stores.
• Custom apps, one per store, which we created for merchants who already worked with Zentro before the Shopify app. They keep working as always. The Shopify app is for stores that are new to Zentro: if a store already connected through a custom app installs it, its connection does not change, the Shopify app uninstalls itself and we keep nothing from that installation.

9.1 What data we receive and why

• Orders and draft orders: number, date, products, quantities, prices, discounts, shipping cost, order notes and attributes, and their payment and fulfillment status.
• Buyer data included with the order: name, phone and shipping address, with its reference, district, province, region and, if the store captures it, the map location. If the order is missing the name or phone, we take them from the customer or from the billing address of the same order. If the store's checkout or form asks for an ID number (DNI or foreign resident card), we take it from the order attributes, because some couriers require it for delivery.
• We do not store the buyer's email that comes with their Shopify orders, and the Zentro Shopify app does not even request it. We only receive it when Shopify sends us a privacy request about that buyer (section 9.5): we use it to find their data and delete it once the request is fulfilled or, if it fails, no later than 30 days after the failure.
• Catalog: products, variants, options, SKUs and prices.
• Store data: domain, name, currency and the permissions the merchant granted; with the Shopify app, also the data in section 2.1.

We use this data for one thing only: letting the merchant manage their cash-on-delivery orders. That means confirming each order with the buyer, preparing it and shipping it with the courier the merchant chooses, tracking the delivery, recording the collection and giving the merchant their reports. We do not use it for anything else, we do not sell it and we do not use it for advertising.

9.2 Permissions we request

Zentro Shopify app. All of them are requested at install; the app does not request optional permissions.

Custom apps (merchants who connected before the Shopify app):

In Shopify, a write permission (write_) includes reading the same data.

9.3 What Zentro changes in your store

With the Zentro Shopify app:

• Your store's orders created since you installed the app: when an order is cancelled, shipped (with its courier and tracking number), delivered or not delivered, has its shipping address corrected, or has its products or quantities changed in Zentro, we make the same change in Shopify so your Shopify admin shows the same as Zentro. We do it within about 10 minutes, except cancellations, which we hold for 15 more minutes in case they are reverted: Shopify does not allow a cancellation to be undone. When an order is cancelled, Shopify restocks it, but we do not issue refunds: if the order had a payment, refund it from Shopify.
• What we do not change: the buyer's name and phone (from the address we send the street, district, province, region and postal code; outside Peru, the street, city and postal code), refunds, returns or the customer record. Shopify also does not allow some product changes, such as the price of a line already in the order or removing units that were already shipped.
• Notifications: we do not ask Shopify to notify your buyer about these changes. If you turned on Shopify's shipment delivered notification, Shopify may send it on its own when we report the delivery.
• Carts: your store's draft orders arrive in Zentro as carts so your team can recover them, but they cannot be confirmed or shipped from Zentro: they become orders when the buyer completes the purchase in your store.
• Products: the ones you create or edit in Zentro and choose to publish to your store: name, description, options, variants, price and SKU, plus a Zentro identifier stored on the product.

With a custom app, in addition: the COD form creates in your store the order for each sale (first as a draft), creates or completes the customer record, adds the offers the buyer accepts after purchase, and stores the form's public key in the store so your theme can display it. Custom apps do not sync order status changes back to the store.

9.4 Communicating with your buyers

Zentro does not contact your buyers on its own or for its own purposes. Your team calls or messages them from Zentro to confirm and arrange each order, and if you connect your WhatsApp Business account and turn on automatic notices, Zentro sends on your behalf, from your number, the order status messages you configure. We do so on your instructions, under the “Communicating with your buyers” section of the Terms of Service.

9.5 Uninstalling and Shopify privacy requests

• When you uninstall the app (or disconnect the store in Zentro, which uninstalls it), we immediately delete the access tokens for your store and stop receiving its data. If you pay your plan through Shopify, Shopify cancels it.
• 48 hours later, Shopify asks us to delete the store's data (shop/redact). We carry it out 21 days after receiving that request, within the 30 days Shopify allows, so that an accidental uninstall does not erase your operation: if you reinstall the app before then, the deletion is cancelled.
• We notify you first. When we receive that request, we send your account's administrators a notice in Zentro with the deletion date and how to avoid it. If your account no longer has access because your plan was cancelled, you see the same notice, with the date, when you open Zentro.
• What we delete: we anonymize the orders and carts that came from that store. We remove the name, phone, email, ID number, exact address and its reference, coordinates, notes, and payment proofs and delivery photos (including the files). We anonymize the customer records that have no other orders or conversations in Zentro, remove the buyer's data from our audit logs and delete the store's tokens. We keep amounts, statuses, dates, products and the area (region, province and district), which identify no one and support your reports and accounting.
• When a buyer asks the store to delete their data (customers/redact), we anonymize their orders and carts from that store the same way, within 30 days.
• What these Shopify requests do not cover: the WhatsApp conversations the buyer had with your store and orders from other channels (WhatsApp, manual or from a CRM). They did not come from Shopify: they are data your store obtained on its own, for example through your WhatsApp Business number. If your buyer also wants them deleted, ask us as described in section 12 or on Data Deletion.
• When a buyer asks for their data (customers/data_request), we send your account's administrators a notice in Zentro; from that notice you download a file (JSON) with what we hold about that buyer in that store, so you can give it to them. We keep no copy: the file is built when you download it. All of this happens within the 30 days Shopify allows.
• What has already been handed to a courier, or written to its spreadsheet for shipping, lives in that courier's systems: the deletion request must also be made to them.

9.6 Billing

If you install Zentro from Shopify, your plan, free trial and billing are managed by Shopify and appear on your Shopify invoice. We do not ask for a card or use Stripe for your account.

9.7 Artificial intelligence

We do not use Shopify data to create, train or improve artificial intelligence models. No Zentro feature takes the name, phone or address of a Shopify order to send them to an artificial intelligence model. What can reach a model, indirectly, is the text of your WhatsApp conversations, if you turn on automatic message classification (section 12): the text of a conversation's latest messages is sent to a model to sort it by intent, and that text may include order data, for example an automatic notice with the buyer's name and address.

10. Data from Google APIs

Zentro accesses Google APIs only when the merchant explicitly authorizes the integration. Scope is limited to files the user selects via Google Picker:

We do not access Gmail, Calendar, Contacts, or other Google services. The drive.file scope limits us strictly to files the user explicitly authorizes one by one.

Zentro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We do not transfer data obtained from Google to third parties for advertising, retargeting, or personalized ad purposes.
• We do not sell data obtained from Google.
• We do not use Google data to train generalized AI or ML models.
• Human review only occurs with explicit user consent or for security, legal compliance, or abuse investigation.

11. Data from Meta (Facebook/Instagram Ads)

Zentro uses the following permissions to access Meta Ads accounts and metrics:

With these Meta Ads permissions we do not post content, send messages, or create or modify campaigns: we only read metrics for in-app reporting. Sending messages over WhatsApp is governed by section 12.

We store the authorizing Meta user identifier, their name when available, the encrypted access token, selected advertising accounts, and campaign metrics. These data let us connect the account and display its reports. When Meta sends a signed deletion request, we automatically delete everything that identifies that person — their Meta identifier and name, their token, the link to the advertising accounts, and their identifiers in our audit records — and return a verifiable receipt. Advertising spend already synced is retained on the merchant's account, detached from the person, because it is accounting data of the business that paid for that advertising and underpins its closed-month reports. See the Meta Ads deletion instructions.

12. Data from WhatsApp Business Platform (Meta Cloud API)

When a merchant connects their WhatsApp Business account to Zentro, we use Meta Platforms, Inc.'s WhatsApp Business Platform to send and receive messages on behalf of that merchant. We request only these permissions:

If the merchant connects their account with a token they generate in their own Meta Business portfolio, instead of the guided signup, we use that token only for the operations in this table.

We process the following data:

• Phone number and WhatsApp profile name of people who message the merchant or whom the merchant messages.
• Content of sent and received messages, including media files such as images, audio and documents. Files we store are hosted on Vercel Blob (section 4).
• Message delivery and read statuses.
• Message templates the merchant creates and their approval status.
• The identifiers of the WhatsApp Business account and its phone numbers, and the access token, which we store encrypted.

We use this data only so the merchant can serve their customers and manage their orders from the Zentro inbox. We do not sell it or use it for advertising. For these conversations, Zentro acts as a processor on behalf of the merchant, who is the controller towards their customers and who accepts Meta's WhatsApp Business terms.

To provide that service, two sub-processors from section 4 receive part of this data. Pusher receives a snippet of each new message to update the inbox in real time. And if automatic message classification is enabled on the merchant's account, the text of each inbound message, together with a few previous messages from the conversation, is sent to an artificial intelligence model that sorts it by intent in the inbox; that result only helps the merchant prioritize what to answer.

Conversations are kept on the merchant's account. At the request of the merchant, or of a person who messaged them, we delete all conversations with that contact along with their media files; requests are made as described in section 7 or on the Data Deletion page. If the merchant disconnects a WhatsApp account, Zentro stops storing new messages from that account; history already received remains on the merchant's account until they ask for it to be deleted. Anyone who messaged a merchant can also exercise their rights directly with that merchant.

13. Data from TikTok API for Business

Zentro accesses TikTok API for Business (TikTok's Marketing API) exclusively to read reports from the ad accounts the merchant authorizes:

With these permissions we do not publish content, send messages, or create, edit, or delete campaigns, ads, audiences, or creatives: we only read reports. We do not access TikTok users' videos, direct messages, or profiles.

We store the encrypted access token, the email of the TikTok for Business account that authorized the connection, the name, currency, and time zone of each connected ad account, and its spend aggregated per campaign and per day. We use that spend to calculate your CPA and ROAS, including for past months. When you disconnect the integration we delete the token and stop storing data from those accounts. Spend already synchronized is kept in the merchant's account, because it is accounting data of the business that paid for those ads, and the email is kept as a record of who authorized the connection, until you request their deletion at privacy@zentro.one or the period in section 6 ends. Details on the integration page.

14. Cookies and measurement of our ads

We use strictly necessary cookies for sessions (authentication) and aggregated analytics cookies (Vercel Analytics, Speed Insights). Calendly receives information you enter when booking training to coordinate your appointment.

We measure which Zentro ads lead to visits, sign-ups, trials and subscriptions unless you turn off advertising measurement: with the Meta pixel in your browser and, when you create your account, your trial starts or you pay your first invoice, by sending Meta from our servers your email, phone, country and an internal identifier hashed (SHA-256), the ad click ID, the IP address and browser you signed up with, and the amount. If you turn measurement off, we store with your account only the campaign that brought you (campaign parameters, landing page, referring domain and date) for our own reports and do not send your events to Meta. Meta processes the data it receives in the United States and other countries as an independent controller, to measure results and show ads. We never send orders, conversations or data about your store’s end customers. Turning measurement off does not change the service you receive, and you can turn it back on at any time. Details, retention and controls in the Cookie Policy.

15. Children

The service is not directed to children under 14. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us to delete it.

16. Security breaches

In case of a breach affecting personal data, we will notify the Peruvian Data Protection Authority (ANPDP) and affected data subjects within the timeframes set by Law 29733 and applicable regulations (e.g., 72 hours under GDPR), and we will notify affected merchants without undue delay. If the breach affects data we receive from Shopify, we also report it to Shopify within 24 hours of becoming aware of it.

17. Changes to this policy

We may update this policy. Material changes will be notified by email or visible notice on the platform with at least 30 days' prior notice. The last updated date appears at the top.

18. Contact

Privacy questions: privacy@zentro.one. You can also request data deletion at /en/data-deletion.