Promio is an Austrian company. Most affiliate software is not, and it shows in the defaults. This page is what we do differently — stated plainly enough that you can check it.
Promio does not collect, hold or forward your affiliates’ commissions. It works out who is owed what and records what you paid; the money goes from you to them directly, by whatever method you already use. No third party sits in the middle, there is no float, and nothing of yours passes through our accounts. The monthly plan is the whole of what we charge.
Our storefront script stores nothing — no cookie, no localStorage, nothing on the visitor’s device — and sends nothing until Shopify’s Customer Privacy API says marketing processing is allowed. Affiliate attribution is not a strictly necessary purpose, so under the ePrivacy Directive it needs prior consent in the EU, EEA and UK. That is how it behaves.
If the consent API cannot be reached, the script does nothing at all. Losing an attribution is the right trade against tracking someone because our own dependency failed. Consent given later in the visit still credits the affiliate; consent withdrawn erases what was stored.
Outside consent regions nothing changes — the API folds in the merchant’s settings and the visitor’s region, and allows processing by default where consent is not required.
The order email, and nothing else. A Shopify order payload also carries a name, a phone number and a shipping address; Promio reads none of them. The email attributes a referred order to the affiliate who sent it, enforces first-order and self-referral rules, and reconciles refunds by order ID.
Encrypted at rest with database-level encryption, encrypted in transit with TLS, and backed up encrypted. Referral clicks are kept 24 months, audit logs 24 months, and a store’s credentials are deleted 48 hours after the app is uninstalled.
Commission records are kept ten years, because Austrian invoicing and accounting law requires it. That is longer than we would otherwise choose, so it is minimised: an erasure request removes the email unless a record the law requires us to keep depends on it — in which case it is minimised and access-restricted rather than deleted.
The three mandatory Shopify privacy webhooks are implemented, not acknowledged and ignored. A redaction request removes the buyer’s email from our records; a shop redaction deletes the store’s tokens and identifiers outright.
Affiliates can be rewarded in store credit instead of cash. No transfer, no payout fee, no bank details changing hands — and for a customer-referral program it is usually what the referrer would rather have anyway.
This page is not legal advice and not a certification. Promio is a processor acting on your instructions; you remain the controller for your customers’ data and for your own consent banner. What we can tell you is exactly what the software does — which is what the rest of this page is for. The full detail is in our privacy policy.
