Green13 Reseller Zone — a Shopify app by Green13 srl. Last updated: 14 October 2026.
The merchant who installs the app is the data controller for their customers' data, resellers included. Green13 srl processes that data on the merchant's behalf, only to provide the app, as a data processor, under our Data Processing Addendum (Article 28 GDPR), which applies to every merchant who installs the app. Contact: info@green13.agency.
Green13 Reseller Zone adds a reserved area for resellers to a Shopify store, at /apps/reseller, inside the store's own theme. Resellers are customers of the store that the merchant marks with a tag. After logging in to the store, they order with the store's inventory and wholesale prices, see their past orders and download the materials the merchant shares. Each order becomes a Shopify draft order, which the merchant checks and confirms in the Shopify admin.
| Customer ID and tags | When a customer who is logged in to the store opens the reseller area, Shopify tells the app, with a signed request, which customer it is. The app reads that customer's tags to check whether they have the merchant's reseller tag. Tags are not stored, and for customers without the tag nothing is stored at all. |
|---|---|
| Name and email address of resellers | Read from Shopify only to show the merchant, inside the app, who their resellers are and who sent each order, and to send the reseller the confirmation email of each order through the merchant's own email server. Names and email addresses are not stored in the app's database. |
| Resellers' orders in the store | To show each reseller their complete order history with the store, the app reads that reseller's own orders from every sales channel (order number, date, payment and fulfillment status, total, tracking number and link, and the ordered items when the reseller opens an order or reorders it) at the moment the page is opened. They are not stored. For orders older than 60 days the app asks Shopify for access to all orders. |
| Order counts of resellers | Number of orders, amount spent and date of the last order of each reseller, read from Shopify to show the merchant the app's Resellers page. Not stored. |
| Addresses and phone numbers | Never read. The app never reads addresses: each draft order uses the reseller's default address, which Shopify fills in itself, so the address stays inside Shopify. Phone numbers are never read either. |
The app also reads store data that is not about customers: products and variants, inventory, translations, languages, locations and files. To show resellers where their orders are, it reads the status of the draft orders created from the reseller area when the page is opened. To prepare the price list of the whole catalogue it asks Shopify for a bulk export of products, variants, prices and inventory, which contains no customer data; the prepared price list is kept for an hour at most and deleted when the app is uninstalled.
| The order | Products, variants and quantities, and the personalization the reseller chooses for each piece when the merchant offers it (for example a text or a font to print). Prices, inventory and minimum quantities are always checked again by the app from the merchant's settings. |
|---|---|
| Company name, VAT number and notes | When the merchant asks for them, they are written into the note of the draft order in Shopify. The app does not store them. |
| Orders sent from the reseller area | For each order: the store, the reseller's Shopify customer ID, the ID and name of the draft order (for example #D12) and, once confirmed, of the order it becomes, its status, total and currency, its lines (variant IDs, quantities, wholesale prices and personalization) and the store language the reseller was using. This lets each reseller see their order history and the merchant see the orders in the app. |
|---|---|
| Store settings | Reseller tag, order form, wholesale price groups, list of materials, notification settings, the store's name, email, main language and currency, and the settings of the merchant's own email (SMTP) server: host, port, username, sender address and name, and the password, which is stored encrypted (AES-256-GCM) and is never shown again, not even to the merchant. |
| Materials | Files the merchant shares with resellers (catalogs, videos, logos) are uploaded to the merchant's Shopify Files and served by Shopify. The app keeps only a reference: file ID, link, name, folder and language. ZIP files of product photos are built while they are downloaded and are never saved on our server. |
| Authentication session | The access token Shopify issues to keep the app installed. It holds no data about the merchant's staff or customers. |
The app does not collect payment details, passwords, dates of birth or any special category of data, and IP addresses are not stored. It uses no analytics, advertising or tracking of any kind.
For each new order the app sends an email to the merchant and an order confirmation to the reseller. Both go through the merchant's own email server, with the SMTP settings the merchant enters in the app: they do not pass through any email account or sending service of Green13. The reseller area opens only after the merchant has set up the email server and a test email has been delivered. The recipient address and the message go from the app directly to the merchant's email provider, which delivers them under the merchant's own terms. If a delivery fails, the app keeps the error message of the email server for the merchant, with every email address removed; the order is created anyway.
| Storage | A database on the app's server, hosted by Aruba S.p.A. in Italy (European Union). |
|---|---|
| Encryption | The email server password and the lines of each reseller order (products, quantities, prices and personalisation texts) are encrypted in the database (AES-256-GCM) with keys held only in the production environment. All traffic to and from the app uses HTTPS, and connections to the merchant's email server always use TLS. |
| Backups | Nightly database backups, encrypted before they leave the server. They are kept for 14 days on the app's server and an encrypted copy for 90 days on Green13's own server in Italy. |
| Who can see it | The merchant's staff, from the app inside their Shopify admin. Each reseller sees only their own orders, in the reseller area, after logging in to the store. Green13 accesses the data only when needed to fix a problem. |
| Shared with third parties | No. Data is exchanged only with Shopify, through Shopify's own APIs, to check the reseller tag, create the draft orders and follow their status. The hosting provider (Aruba S.p.A., Italy) is the only sub-processor. |
| Sold or used for advertising | Never. |
Green13 uses no other provider, and the data is not transferred outside the European Union. Shopify, which runs the merchant's store, and the merchant's own email provider, which delivers the emails, work for the merchant under the merchant's own agreements with them.
shop/redact).customers/redact). Draft orders and
orders in the merchant's Shopify store are handled by Shopify.
Resellers and other customers exercise their rights (access, correction, erasure) by contacting the
store. When the merchant forwards a request through Shopify, the app compiles every order it holds
for that customer (customers/data_request); erasure requests
(customers/redact) are carried out automatically. Customers may also write to
info@green13.agency. In the EU you can lodge a complaint
with your data protection authority.
If the app starts to process new data, this page will be updated before that change is released, and the date above will change.
Green13 srl — Via della Resistenza 129/c, 20090 Buccinasco (MI), Italy
VAT IT14697160969 — REA MI 2801512 — info@green13.agency