App privacy policy

Who is responsible

Our operator details are also listed in the Impressum.

Data we use and why

• Inventory synchronization. Shopify provides shop and contact details, permissions, and authentication data. We use these, along with product, inventory, settings, and activity data, to operate the app and synchronize stock.
• Billing. We use subscription and billing information to manage your plan. Shopify handles payment; we do not collect payment-card details.
• Support. We use your contact details and messages to answer your requests.
• Service security. Connection data and application logs help us deliver the app and investigate problems.

The app does not request access to Shopify customers or orders. Shopify may send customer identifiers in mandatory privacy requests; these are handled for the purpose of responding to the request.

Service processing is based on performing our contract with you (Article 6(1)(b) GDPR), or our legitimate interest in providing the service to your business where you act on its behalf (Article 6(1)(f)). Service delivery and security rely on our legitimate interest in operating a reliable service. Processing required by law relies on Article 6(1)(c).

Sign-in and diagnostics

The app uses a short-lived cookie to keep you signed in. Shopify also uses its own authentication and browser storage.

We use Sentry, with EU data hosting, to diagnose application errors.

Who receives data

Hetzner Online GmbH hosts the app in the EU. We also use Sentry for diagnostics and email/support providers to answer requests. These providers receive the data needed to deliver their services.

Shopify provides the platform, authentication, and billing; see Shopify’s privacy policy. We may also disclose data where required by law.

How long data is kept

We keep shop and inventory data while needed to provide the app. Uninstalling ends our access; deletion follows Shopify’s request to erase the app’s stored shop data and is not necessarily immediate.

• Inventory activity: 30 days.
• Database backups: 30 days. Deleted data may remain in backup copies until those copies expire.
• Server logs: 30 days.
• Support emails: one year.

Separate billing and accounting records may need to be retained to meet legal recordkeeping obligations.

Your choices and rights

You may request access, correction, deletion, restriction, or portability of your personal data where applicable. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it for the future. Contact the operator above to make a request; we may need to verify your identity.

You can also complain to a data protection authority, including the authority where you live, work, or believe an infringement occurred.

Shop and inventory data are necessary to provide synchronization. If you do not provide the required permissions, the app cannot deliver that functionality. We do not use your personal data to make automated decisions producing legal or similarly significant effects.

Changes to this notice

We update this notice when our processing changes. Draft updated: 14 September 2026.