Privacy Policy

1. Information We Collect

MultiStore Sync collects only the data necessary to provide the service. This includes Shopify store domain, access tokens (stored encrypted), product and inventory data you choose to sync, and session identifiers.

2. How We Use Your Data

Data is used solely to operate the sync service — connecting stores, transferring product data between them, and maintaining sync history. We do not sell, rent, or share your data with third parties.

3. Data Storage

Store sessions are stored in a PostgreSQL database (Supabase). Product sync settings and relationship data are stored in Supabase. All data is stored in the region you select during setup.

4. GDPR Compliance

We comply with GDPR requirements. Shopify sends us data request and erasure webhooks which we process promptly. You can request deletion of your data at any time by uninstalling the app or contacting us directly.

5. Data Retention

Session data is deleted when you uninstall the app. Sync history and relationship records are retained for 90 days after disconnection, then permanently deleted.

6. Security

All webhook payloads are verified using HMAC-SHA256. Store-to-store connections use secure tokens. All data in transit is encrypted via TLS.

7. Contact

For privacy-related requests: privacy@shopifytechguru.com