This privacy policy explains how the Tunivo Profit application accesses, uses, stores, shares, retains and deletes data, including Google user data. It applies to the application only. It is a separate document from the privacy policy of the Tunivo online store, which covers store customers.
Tunivo Profit is developed and operated by MASYV TEAM S.R.L., VAT number RO50726728, a company registered in Romania, which operates the online store www.tunivo.ro. Contact for any question about this policy or about your data: office@tunivo.ro.
Tunivo Profit is an internal management accounting application. It is used solely by our own staff to calculate the profitability of our own online store. It combines revenue and cost of goods from Shopify with costs that Shopify does not hold — courier invoices, packaging, bank fees, rent and advertising spend — and reports the profit that remains after all of them.
The application is private. It is not published in any app store, is not offered to any other company, and is installed on a single Shopify store that we own. It has no end users outside our own staff.
The application requests the scope https://www.googleapis.com/auth/adwords, in
read-only mode, for the Google Ads account owned by our company, using OAuth
authorization granted by the owner of that account. Through this scope it reads:
CustomerService.ListAccessibleCustomers);metrics.cost_micros, segments.date, campaign.name),
queried through GoogleAdsService.SearchStream.The application accesses no other Google user data. It does not read personal information, contacts, email, files, location, or any other category of Google user data.
The advertising spend read from Google Ads is used for a single purpose: it is subtracted from revenue in our internal profit report, so that the profit figure reflects what was actually spent on advertising. Advertising is one of the largest costs of an online store, and it is the one figure a profit report cannot obtain from Shopify. Without it, the reported profit would be overstated by exactly the amount spent on advertising.
The application does not create, edit, pause or otherwise manage advertising campaigns. It performs no write operations of any kind against Google Ads.
Google user data is not used for targeted advertising, is not sold or transferred to data brokers, is not used to train artificial intelligence or machine learning models, and is not used for any purpose other than the profit calculation described above.
Data is stored in a PostgreSQL database operated by our company at a cloud infrastructure provider. Access to the database and to the application is restricted to authorized staff of our company. The application is reachable only from the administration interface of our own Shopify store and requires an authenticated Shopify session; requests without such a session are refused before any data is read.
All traffic to and from the application is encrypted with TLS. Authorization tokens are stored either in the hosting platform's encrypted secret storage or in the application's own database, and are used exclusively by the application.
Google user data obtained by the application is not shared with any third party. It is not transferred to other companies, not published, not made available to anyone outside our company, and not processed by any external service on our behalf.
Daily advertising spend figures are retained for as long as they are needed for internal financial reporting. They are historical cost figures required to compute the profit of past periods, so they remain after authorization is revoked; revoking authorization stops the retrieval of any new data.
The owner of the Google account may revoke the application's access at any time from Google Account permissions. To request deletion of data already retrieved, write to office@tunivo.ro. Deletion requests are carried out within 30 days, after which the data is permanently removed from our database and from backups as they rotate.
Where the General Data Protection Regulation (EU) 2016/679 applies, we process the data described above on the following legal bases:
The Google user data described in section 3 is processed exclusively on the basis of the consent given by the owner of the Google Ads account through the OAuth authorization flow, and that consent can be withdrawn at any time as described in section 7.
Any person whose personal data we process has the right to request access to that data, its rectification or erasure, the restriction of processing, and the portability of the data, and to object to processing carried out on the basis of legitimate interest. These requests can be sent to office@tunivo.ro and are answered within 30 days.
Anyone who considers that we have processed their data unlawfully may lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
The application performs no automated decision-making that produces legal effects or similarly significantly affects any person. It calculates costs, revenue and margins, and it presents those figures to our own staff, who take every decision themselves.
Data is stored on infrastructure operated by our hosting provider. Where data is transferred outside the European Economic Area, the transfer takes place on the basis of the European Commission's standard contractual clauses concluded with the provider, or another mechanism permitted by Chapter V of the General Data Protection Regulation.
Google user data obtained through the Google Ads API is stored in the same database and is not transferred to any recipient other than our own company.
The application is used only by our own staff, from the administration interface of our own Shopify store. It sets no advertising or analytics cookies. It uses only the session cookie required by Shopify to keep the administrator authenticated, and it keeps technical server logs — request time, address and status — which are used solely for diagnosing errors and detecting abuse, and which are retained for a limited period.
The public pages of this application, including this privacy policy page, set no cookies at all.
The application is a business tool used by the staff of our own company. It is not addressed to children and it does not knowingly process the data of persons under the age of 16.
If a security breach occurs that is likely to result in a risk to the rights and freedoms of the persons concerned, we notify the supervisory authority within 72 hours of becoming aware of it, and we inform the persons concerned where the regulation requires it.
Tunivo Profit's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Besides Google Ads data, the application reads orders, products, inventory and sales reports from our own Shopify store, and advertising spend from our own Meta advertising account, in read-only mode and for the same purpose. This data is subject to the same storage, sharing, retention and deletion rules described above.
Any change to this policy is published on this page, with the date at the top updated accordingly.
Aceasta politica explica cum acceseaza, foloseste, stocheaza, partajeaza si sterge aplicatia Tunivo Profit datele, inclusiv datele Google. Se refera exclusiv la aplicatie si este un document distinct de politica de confidentialitate a magazinului Tunivo, care priveste clientii magazinului.
Aplicatia este dezvoltata si operata de MASYV TEAM S.R.L., CUI RO50726728, Romania, societatea care opereaza magazinul online www.tunivo.ro. Contact: office@tunivo.ro.
Tunivo Profit este o aplicatie interna de contabilitate manageriala, folosita exclusiv de personalul societatii pentru a calcula profitabilitatea propriului magazin. Aduce la un loc veniturile si costul marfii din Shopify cu costuri pe care Shopify nu le cunoaste — facturi de curierat, ambalare, comisioane bancare, chirie si cheltuiala de publicitate.
Nu este publicata in niciun magazin de aplicatii, nu este oferita altor societati si nu are utilizatori in afara personalului nostru.
Aplicatia cere permisiunea https://www.googleapis.com/auth/adwords, exclusiv in
citire, pentru contul de publicitate al societatii noastre. Citeste identificatorul
contului accesibil si cheltuiala de publicitate pe zi si pe campanie. Nu acceseaza nicio alta
categorie de date Google.
Intr-un singur scop: cheltuiala de publicitate se scade din venituri la calculul profitului propriu. Aplicatia nu creeaza, nu modifica si nu opreste campanii, si nu efectueaza nicio operatiune de scriere. Datele nu sunt folosite pentru publicitate, nu sunt vandute si nu sunt folosite pentru antrenarea de modele de inteligenta artificiala.
Intr-o baza de date PostgreSQL administrata de societate, la un furnizor de infrastructura cloud, cu acces restrictionat la personalul autorizat. Aplicatia se deschide doar din adminul magazinului propriu si cere o sesiune Shopify valida; cererile fara sesiune sunt refuzate inainte de orice citire din baza de date. Tot traficul este criptat TLS.
Cu nimeni. Datele Google obtinute de aplicatie nu sunt transmise niciunei terte parti si nu sunt accesibile nimanui din afara societatii.
Cheltuiala zilnica este pastrata cat timp este necesara pentru raportarea financiara interna — este o cifra de cost istoric, necesara pentru calculul profitului perioadelor trecute. Revocarea autorizarii opreste preluarea de date noi. Stergerea datelor deja preluate se face la cerere, scriind la office@tunivo.ro, in cel mult 30 de zile.
Prelucrarea se face in temeiul interesului legitim de a ne administra propria activitate (art. 6(1)(f) GDPR), al executarii contractului cu clientii magazinului (art. 6(1)(b)) si al obligatiilor legale contabile si fiscale (art. 6(1)(c)). Datele Google descrise la sectiunea 3 se prelucreaza exclusiv in baza consimtamantului titularului contului, acordat prin autorizarea OAuth si retractabil oricand.
Orice persoana ale carei date le prelucram are dreptul de acces, rectificare, stergere, restrictionare si portabilitate, si dreptul de a se opune prelucrarii intemeiate pe interes legitim. Cererile se trimit la office@tunivo.ro si primesc raspuns in 30 de zile.
Cine considera ca i-am prelucrat datele nelegal poate depune plangere la Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal, www.dataprotection.ro.
Aplicatia nu ia nicio decizie automata cu efecte juridice sau cu efecte semnificative similare. Calculeaza costuri, venituri si marje, iar deciziile le iau oamenii.
Datele sunt gazduite la furnizorul nostru de infrastructura. Unde exista transfer in afara Spatiului Economic European, el are loc in baza clauzelor contractuale standard ale Comisiei Europene sau a altui mecanism permis de Capitolul V din GDPR. Datele Google nu sunt transferate niciunui alt destinatar.
Aplicatia e folosita doar de personalul propriu, din adminul magazinului. Nu pune cookie-uri de publicitate sau de analiza; foloseste doar cookie-ul de sesiune cerut de Shopify si pastreaza jurnale tehnice de server, folosite exclusiv pentru diagnosticarea erorilor. Paginile publice, inclusiv aceasta, nu pun niciun cookie.
Aplicatia e un instrument de lucru al firmei. Nu se adreseaza copiilor si nu prelucreaza cu buna stiinta date ale persoanelor sub 16 ani.
In caz de incident care poate genera un risc pentru drepturile persoanelor vizate, notificam autoritatea de supraveghere in 72 de ore de la luarea la cunostinta si informam persoanele vizate acolo unde regulamentul o cere.
Utilizarea si transferul de informatii primite de la Google API-uri respecta Google API Services User Data Policy, inclusiv cerintele Limited Use.
Aplicatia mai citeste, tot in regim de citire, comenzile, produsele, stocurile si rapoartele de vanzari din magazinul propriu, si cheltuiala din contul propriu de reclama Meta, in acelasi scop si in aceleasi conditii.
Orice modificare a acestei politici este publicata pe aceasta pagina, cu actualizarea datei de mai sus.