Legal & Compliance
Privacy Policy
Last updated: November 2, 2026 · View changelog
1. Who Is Responsible
Ancile ("the App", "we", "us", "our") is a Shopify security and fraud monitoring application built and operated by ALHAN CyberSecurity ("Company"), located in Istanbul, Turkey.
2. Roles: Controller and Processor
Under the General Data Protection Regulation (GDPR) and the Turkish Law on the Protection of Personal Data (KVKK No. 6698):
- For merchant account details: ALHAN CyberSecurity acts as a Data Controller for the store owner's contact information, subscription status, and communications.
- For merchant store telemetry: When Ancile monitors transactions, IP addresses, and customer event payloads originating from your Shopify store, ALHAN CyberSecurity acts as a Data Processor. The merchant is the Data Controller of their customer and order data.
3. Data We Access and Purpose Mapping
Ancile requests read-only scopes exclusively and declares no write scopes. It never creates, edits, or deletes your store's products, orders, inventory, or themes.
| API Scope | Data Elements Accessed | Operational Purpose |
|---|---|---|
read_orders |
Order, cart, checkout payloads, amounts, transaction status, client IP, user agent. | Calculates velocity rules (carding bursts, repeated high carts), payment decline rates, and network reputation scoring. |
read_customers |
Customer ID, creation timestamp, country, order history reference. | Correlates events with customer account patterns and processes mandatory GDPR customer data requests and redactions. |
read_customer_merge |
Customer merge webhook payloads. | Evaluates customer account consolidation events as an account-takeover anomaly. |
read_shopify_payments_disputes |
Dispute amounts, reason codes, chargeback notifications. | Flags active payment disputes and weights fraud-related reason codes over delivery inquiries. |
read_themes |
Theme asset files, Liquid code, and script references. | Inspects active theme code for unauthorized third-party tags, base64 payloads, and payment skimmer patterns. |
read_users. The app does not monitor merchant staff logins, staff account activity, or employee sessions. Ancile does not monitor customer login attempts or brute-force logins because Shopify provides no customer login webhook.
4. Legal Bases for Processing
We process store telemetry and account information under the following legal bases:
- Performance of Contract (GDPR Art. 6(1)(b)): To provide the security monitoring, alerting, and incident reporting services agreed upon when you install the App.
- Legitimate Interests (GDPR Art. 6(1)(f)): To detect fraudulent transactions, protect merchants from chargeback losses, identify compromised storefront themes, and maintain network integrity.
- Compliance with Legal Obligations (GDPR Art. 6(1)(c)): To maintain billing transaction records and comply with statutory accounting requirements.
5. Subprocessors
To provide threat analysis and infrastructure services, Ancile transfers IP addresses and event metadata to vetted third-party subprocessors under strict data protection agreements:
| Subprocessor | Service Provided | Data Shared | Location |
|---|---|---|---|
| PostgreSQL Database Hosting | Encrypted database storage for event telemetry and configuration | Event records, risk rules, IP blocklists | European Union (Germany) |
| AbuseIPDB | IP address threat reputation and abuse confidence lookup | Client IP address only | United States (Standard Contractual Clauses) |
| MaxMind | IP geolocation and Autonomous System Number (ASN) lookup | Client IP address only | United States (Standard Contractual Clauses) |
| Transactional Email Provider | Dispatch of alert notifications and weekly executive summaries | Merchant contact email, alert summaries | European Union / United States |
6. Data Retention and Backups
Event history retention is configurable per store and capped by the active subscription plan:
- Free Plan: 7 days of event history
- Plus Plan: 30 days of event history
- Pro Plan: 90 days of event history
- Max Plan: 365 days of event history
Events older than the plan retention limit are automatically purged from the live database. Encrypted operational backups are maintained for exactly 14 days for disaster recovery purposes, after which they are permanently overwritten.
7. Mandatory GDPR Webhooks & Data Deletion
Ancile complies fully with Shopify's mandatory GDPR and data privacy webhooks via dedicated HTTPS endpoints verified by Shopify HMAC signatures:
customers/data_request: Upon receiving a customer data request from Shopify, Ancile aggregates all security telemetry associated with that customer and returns it to the merchant for delivery.customers/redact: When Shopify issues a customer redaction request, Ancile permanently erases all event records and telemetry linked to the specified customer ID.shop/redact: Forty-eight hours after an app uninstall (or as dictated by Shopify), Shopify transmits ashop/redactwebhook. Ancile immediately purges the store record, all configured risk rules, IP blocklists, and all historical event records from our database.
Merchants may also trigger a store disconnect directly from within the Ancile app settings at any time, which halts monitoring and deletes all store telemetry immediately.
8. Security Safeguards
ALHAN CyberSecurity applies rigorous security controls to safeguard merchant telemetry:
- Encryption in Transit: All communications between Shopify, the merchant browser, and Ancile API endpoints are enforced via TLS 1.3.
- Encryption at Rest: Database volumes and operational backups are encrypted using AES-256.
- HMAC Signature Verification: Every incoming webhook payload from Shopify is cryptographically verified using SHA-256 HMAC before processing.
- Scope Isolation: The application requests read-only permissions exclusively. It possesses no technical capability to write, modify, or erase store catalog or order state.
9. International Data Transfers
Ancile's primary database and application services are hosted in the European Union (Frankfurt, Germany). Where subprocessors (such as threat intelligence APIs) are located in third countries, transfers are governed by European Commission Standard Contractual Clauses (SCCs) to ensure equivalent protection standards.
10. Merchant and Customer Rights
Under applicable data protection laws (GDPR, KVKK), you have the right to:
- Request a copy of the personal data held about your store.
- Request correction or deletion of your store telemetry.
- Object to or restrict certain processing activities.
- Data portability in a structured, machine-readable format.
- Lodge a complaint with a supervisory data protection authority.
To exercise these rights, contact us at info@alhansecurity.com. We will respond within 30 days.
11. Cookies and Tracking
Marketing Website (ancile.alhansecurity.com): We do not set tracking cookies, marketing pixels, or third-party analytics trackers. No non-essential cookies are placed on your device.
Embedded Application (ancile.store): The app operates embedded inside the Shopify admin using Shopify App Bridge session tokens. It does not utilize cross-site tracking or commercial advertising cookies.
12. Contact
For privacy-related inquiries or data requests, contact:
ALHAN CyberSecurity
Email: info@alhansecurity.com
Website: alhansecurity.com