Shopify Data We Process

When you install and authorize Zeosync and connect a Shopify store, we may receive information from your Shopify store through Shopify's APIs, including:

• Store name, domain, and account metadata
• Product data such as titles, variants, SKUs, pricing, and inventory levels
• Order data including order numbers, statuses, line items, totals, taxes, and fulfillment details
• Customer information accessed only where necessary for supported order-sync functionality, including customer name, email address, phone number, billing address, shipping address, and order history
• API credentials, access tokens, and related integration data required to authenticate and maintain the connection

How We Use Your Information

Shopify Authorization

Zeosync uses Shopify's APIs to provide its functionality. When you install the app, Shopify asks you to authorize the permissions required for the service. We only request and use the permissions necessary to connect the store and provide the synchronization features described in our service. By connecting a Shopify store, you confirm that you have the authority to authorize Zeosync to access the store and the data needed to provide the service.

Data Retention

We retain information for as long as necessary to provide the Service, maintain the integration, process orders, support billing and account management, and comply with applicable legal, accounting, and security obligations. When a merchant disconnects, uninstalls, or cancels the service, we delete or anonymize data that is no longer required for the Service, subject to applicable law, contractual obligations, and temporary backup retention periods. Backup copies may be retained for a limited period for data recovery and security purposes.

Shopify Privacy Requests and Compliance

We respond to applicable privacy and data requests under Shopify's requirements and applicable law. This includes handling Shopify compliance webhooks such as customers/data_request, customers/redact, and shop/redact where applicable to the merchant's account and data.

Third-Party Service Providers

Zeosync works with third-party providers required to operate and support the Service. These may include Shopify, Amazon, Stripe, hosting and database providers, and email or support service providers. We do not sell personal data. We may share data only as necessary to provide the Service, process payments, maintain infrastructure, or comply with legal obligations.

International Data Transfers

Data may be processed and stored on servers or systems located in jurisdictions outside the merchant's home country, including where our hosting, database, and support providers are located. We use reasonable administrative, technical, and organizational safeguards, including access controls, secure hosting, encryption in transit, and restricted internal access, to help protect data while it is processed internationally.

Data Security

We implement reasonable security measures to protect personal and business data, including encrypted communication where supported, secure API connections, limited access controls, monitoring, and routine review of technical and operational safeguards. We do not sell personal data and only share data with trusted service providers when necessary to operate the Service.