1. Introduction
Synced ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.
2. Information We Collect
When you install and use Synced, we collect:
- Store Information: Your Shopify store domain, store name, and email address.
- Order Data: Order details including order IDs, customer names, shipping addresses, product information, and fulfillment status to sync with your configured destinations.
- Configuration Data: Webhook destinations, field mappings, and integration settings.
- Usage Data: Sync logs, error reports, and app usage statistics.
3. How We Use Your Information
We use the collected information to:
- Sync your Shopify orders to your configured fulfillment destinations
- Process inbound fulfillment updates from your warehouse systems
- Provide customer support and troubleshoot issues
- Send important notifications about your syncs and account
- Improve our services and develop new features
4. Data Sharing
We share your order data only with the webhook destinations you configure. We do not sell, rent, or share your data with third parties for marketing purposes.
We may share data with:
- Your Configured Destinations: Order data is sent to the webhook endpoints you specify.
- Service Providers: We use trusted providers for hosting, databases, and infrastructure.
- Legal Requirements: When required by law or to protect our rights.
5. Data Security
We implement industry-standard security measures:
- All data is encrypted in transit using TLS/SSL
- Sensitive credentials (API keys, access tokens) are encrypted at rest using AES-256
- Access to production systems is restricted and logged
- Regular security audits and updates
6. Data Retention
We retain your data for as long as you have an active subscription. Sync logs are retained for 90 days. When you uninstall the app, we delete your data within 48 hours in compliance with Shopify's requirements.
7. Your Rights
You have the right to:
- Access the data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Opt out of non-essential communications
8. GDPR Compliance
For users in the European Economic Area (EEA), we comply with GDPR requirements. We process data based on legitimate business interests and your consent. You may contact us to exercise your data protection rights.
9. California Privacy Rights (CCPA)
California residents have additional rights under CCPA, including the right to know what personal information is collected and the right to request deletion. We do not sell personal information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: privacy@synced.app