Zentro

Privacy Policy

Last updated: September 30, 2026

Zentro is operated by FH MARKETING S.R.L. (tax code 50128643), registered at Intrarea Simionescu Gheorghe Nr. 19, Ap. B26, București, România. In this policy, "Zentro", "we", "us" and "our" refer to FH MARKETING S.R.L.

This policy explains what information Zentro collects, why we collect it, who processes it on our behalf, and the choices you have. It applies to the Zentro web application and this website.

1. Information we collect

Your account

When you create an account, we collect your email address and, if you set one, a password. Passwords are stored as one-way hashes by our authentication provider and are never visible to us. We also store the details you give us about your business: organization name, country, industry, VAT registration status and reporting currency. We need these to calculate your figures correctly.

Your Shopify store

When you install Zentro from Shopify, we read your orders, products and product variants through the Shopify Admin API. For each order, we store:

  • Financial details: revenue, taxes, shipping, discounts, refunds, and the amounts paid through each payment method.
  • Line items: products, quantities and product costs.
  • Order context: sales channel, fulfillment and delivery dates, destination country and region, and whether an item was sold on subscription.
  • Marketing attribution: UTM parameters, landing page and referring site.
  • Shopify's internal customer ID. We use it only to tell a customer's first order apart from a repeat purchase.

We do not request or store your customers' names, email addresses, phone numbers or street addresses.

When an install begins in Shopify before you have a Zentro account, we hold the store's encrypted access token for up to one hour while you sign up. If you don't finish signing up, the token is discarded.

Your Meta ad account

When you connect a Meta ad account, we read the list of ad accounts you can access and the daily ad spend of the account you choose. We do not read campaign, ad or audience details, and we do not collect any information about the people who saw your ads.

Costs you enter

You can enter business costs, such as shipping rates, packaging, payment fees and operating expenses, to build contribution margin and profit-and-loss reports. This information belongs to your organization and is never shared.

Error reports

When the app fails, it sends an error report to our monitoring provider so we can find and fix the problem. A report includes the error message and technical trace, the page or process where the error occurred, your organization and user IDs, your browser and language, and the app version.

Error reports do not include your email address, IP address, cookies, request contents, or any store, cost or advertising data. Sensitive values are removed before a report leaves our servers. We do not record sessions or screens.

Cookies

We use only strictly necessary cookies: one keeps you signed in, and during a Shopify install another links the install to your new account. We do not use analytics, advertising or third-party tracking cookies.

2. How we use your information

We use the information described above only to:

  • Sign you in and keep your account secure.
  • Sync your store and advertising data.
  • Calculate contribution margin, profit and loss, customer acquisition cost, cohorts and other financial reports.
  • Find and fix problems in the app.
  • Contact you about your account or material changes to this policy.

We process your information to provide the service you signed up for (GDPR Article 6(1)(b)). We run error monitoring and security on the basis of our legitimate interest in a reliable, secure service (Article 6(1)(f)).

We do not sell your information, use it for advertising, or share one organization's data with another.

3. How we protect it

  • All traffic is encrypted in transit with HTTPS.
  • Access tokens for Shopify and Meta are encrypted at rest with AES-256-GCM.
  • Each organization's data is isolated by row-level security rules enforced in the database, so no user can read another organization's data.
  • Sign-in sessions use secure, HTTP-only cookies.

4. Service providers

We use the following providers to run Zentro:

  • Supabase: database and authentication, hosted in Frankfurt, Germany.
  • Hetzner: application servers in Germany.
  • Inngest: scheduling for background syncs. It receives job details such as organization and integration IDs.
  • Sentry: error monitoring in its EU data region. It receives the error reports described in section 1.
  • Shopify and Meta: the platforms we read your data from, once you connect them.

Each provider processes data only to perform its service for us. We do not send your information to anyone else.

5. Retention and deletion

We keep your data while your account is active. If you disconnect an integration, we stop syncing from it and keep the data already synced, so your past reports stay accurate. You can reconnect at any time.

To delete your account and all of its data, email mihai@fuelhaus.co. We'll delete it within 30 days of confirming the request came from you.

Error reports are deleted automatically after 30 days.

Shopify privacy requests

We respond to Shopify's mandatory privacy requests. When one of your customers asks to be erased, we remove their customer ID from your orders. The order amounts stay in your reports, because they are your business records. Since the customer ID is the only personal data we hold about your customers, a customer data request covers that ID alone.

Meta privacy requests

If you remove Zentro in your Facebook settings, we stop syncing and keep the ad spend already collected. If you send a data deletion request through Facebook, we delete all ad spend collected from your Meta account and your stored access token, and give you a confirmation code to check the request's status.

6. Your rights

Under the GDPR and Romanian law, you have the right to:

  • Access the personal data we hold about you.
  • Correct data that's inaccurate.
  • Have your data deleted.
  • Restrict or object to how we process it.
  • Receive your data in a portable format.
  • Complain to the Romanian data protection authority (ANSPDCP).

To exercise any of these rights, email mihai@fuelhaus.co. We reply within one month.

7. Children

Zentro is a tool for businesses. We do not knowingly collect data from anyone under 16.

8. Changes to this policy

We may update this policy as Zentro changes. If a change is material, we'll email you before it takes effect. The date at the top of this page shows when it last changed.

9. Contact

FH MARKETING S.R.L.
Intrarea Simionescu Gheorghe Nr. 19, Ap. B26
București, România
mihai@fuelhaus.co

© 2026 ZentroPrivacy PolicyTerms of Servicemihai@fuelhaus.co