Privacy Policy

1. Scope and roles

This Privacy Policy applies to the AfterHub application and related support services provided by Hexin Technology (collectively, the “Services,” “AfterHub,” “we,” “us,” or “our”).

When a Shopify merchant installs or uses AfterHub, we process certain merchant and customer information to provide the Services. For customer information submitted to us by a merchant or obtained through Shopify on the merchant’s behalf, the merchant determines why and how the information is processed, and AfterHub acts as the merchant’s service provider or data processor. Customers should also review the privacy policy of the merchant from whom they made a purchase.

2. Information we collect

Depending on how a merchant configures and uses AfterHub, we may collect or process the following categories of information:

• Merchant and account information: store name and domain, merchant contact name, business contact details, account identifiers, app configuration, subscription status, and communications with our support team.
• Shopify store information: identifiers and records made available through Shopify APIs and webhooks, including product, inventory, location, fulfillment, shipping, order, return, exchange, and refund information.
• Customer and order information: customer name, email address, phone number, shipping or billing address, order details, purchased items, payment and refund status, return reasons, customer comments, and files or images submitted in connection with a return request.
• Technical and usage information: IP address, browser and device information, timestamps, diagnostic logs, security events, and information about how merchants and customers interact with the Services.
• Information from connected services: information received from Shopify and from shipping, logistics, notification, or return-service providers that a merchant chooses to connect to AfterHub.

We seek to collect and process only the information reasonably necessary to provide the Services selected by the merchant.

3. How we use information

We use information for the following purposes:

• Provide, operate, maintain, and support AfterHub.
• Authenticate users and connect AfterHub with a merchant’s Shopify store.
• Receive, review, route, and manage return, exchange, and refund requests.
• Display order status, return instructions, shipping information, and related communications.
• Configure merchant policies, eligibility rules, workflows, and notifications.
• Troubleshoot errors, protect the Services, prevent fraud or misuse, and monitor service performance.
• Respond to support requests and communicate service or policy updates.
• Comply with applicable law, lawful requests, and Shopify platform requirements.

We do not sell personal information. We do not use customer information received through Shopify to create profiles for third-party advertising.

4. Cookies and similar technologies

AfterHub may use cookies, local storage, and similar technologies that are necessary for authentication, security, user preferences, and core application functionality. We may also use limited analytics to understand service performance and diagnose errors. Where applicable law requires consent for a non-essential technology, we will request or respect that consent.

5. How we disclose information

We may disclose information only as needed for the purposes described in this policy:

• To the relevant merchant: merchants and their authorized staff can access information associated with their store and return workflows.
• To Shopify: we exchange information with Shopify to install, authenticate, operate, and maintain the app and to meet platform requirements.
• To service providers: hosting, infrastructure, security, communications, customer support, shipping, logistics, and other vendors process information under contractual restrictions and only to perform services for us or the merchant.
• For legal and safety reasons: we may disclose information when required by law or when reasonably necessary to protect rights, safety, security, and the integrity of the Services.
• In a business transaction: information may be transferred as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality and legal requirements.

6. Data retention and deletion

We retain personal information for as long as reasonably necessary to provide the Services, fulfill the merchant’s instructions, maintain security and business records, resolve disputes, and comply with legal obligations. Retention periods depend on the type of information, the merchant’s configuration, and applicable law.

When AfterHub receives a valid deletion request from a merchant or a Shopify mandatory compliance webhook, we delete or de-identify the relevant information unless retention is required by law. When a merchant uninstalls AfterHub, we process Shopify’s shop-redaction request and delete or de-identify store data that we are no longer required to retain.

7. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, transport encryption, monitoring, and service-provider controls. No method of transmission or storage can provide absolute security.

8. International data transfers

AfterHub and its service providers may process information in countries other than the country where a merchant or customer is located. Where required, we use appropriate safeguards for international transfers and process information in accordance with applicable data protection law.

9. Privacy rights and requests

Depending on applicable law, individuals may have rights to request access to, correction of, deletion of, or restriction of their personal information, and may have rights to object to processing or receive a portable copy.

Customers should generally submit requests to the Shopify merchant with whom they transacted. This enables the merchant to verify the request and instruct AfterHub when we process the information on the merchant’s behalf. Merchants and other individuals may contact us using the details below. We may need to verify the request before responding.

10. Children’s privacy

AfterHub is a business service for merchants and is not directed to children. We do not knowingly collect personal information directly from children for our own purposes. Customer information processed on behalf of a merchant is governed by that merchant’s instructions and privacy policy.

11. Changes to this policy

We may update this Privacy Policy to reflect changes to the Services, our data practices, or legal requirements. We will post the updated policy on this page and revise the “Last updated” date. Where required, we will provide additional notice.

12. Contact us