Privacy policy

Effective 3 September 2026

Joon is a Shopify email decision product operated by AlloHQ. This policy explains how we handle merchant, staff, customer and storefront data when a merchant installs or uses Joon.

Data we process

• Shop and staff identifiers needed to install, authenticate and authorize the app.
• Products, collections, customers, orders, checkouts, fulfilments and marketing-consent state needed for segmentation, approved email journeys and outcome reporting.
• Consent-aware storefront events such as page, product, collection, search, cart and checkout activity. Direct contact, address and payment fields are removed from pixel payloads before storage.
• Email delivery, bounce, complaint and unsubscribe events needed for reporting and suppression.
• Campaign, journey, approval, holdout and decision records created in Joon.

How we use data

We use data only to provide, secure and improve the merchant’s Joon workspace: synchronize Shopify data, construct audiences, enforce consent and suppression, generate drafts, execute merchant-approved email, measure treatment against control, prevent duplicate delivery, investigate incidents and comply with legal requests.

AI processing

Joon may send the minimum context needed to configured AI providers to generate or analyze merchant-requested content. Joon does not expose one merchant’s identifiable customer data to another merchant.

Sharing

We share data only with service providers needed to operate Joon, with the merchant’s configured delivery provider, when required by law, or during a corporate transaction subject to appropriate safeguards. Current providers are listed on our subprocessor page.

Retention and deletion

Shopify privacy requests are authenticated and processed through mandatory webhooks. Customer data requests are exported securely; customer and shop redaction requests delete or anonymize applicable data. Operational webhook and provider-event deduplication records are retained only as needed for safe delivery and audit. Uninstall revokes the connection and begins the applicable Shopify deletion timetable.

Security

Joon encrypts Shopify credentials at rest, verifies signed Shopify and delivery-provider requests, uses short-lived embedded identity tokens, restricts store access by tenant and applies delivery kill switches, suppression and idempotency controls. No system is perfectly secure; contact us promptly if you believe data is at risk.

Your choices and requests

Merchants can uninstall Joon through Shopify. Customers should normally contact the merchant that collected their data; Shopify’s privacy-request flow will relay applicable requests to us. For privacy questions, email founders@allohq.ai.

Before public submission, the operator’s registered legal name and postal address must be added here after founder/legal review.