Privacy Policy

Account information

When you create a SyncTec account, we collect your name, email address, and password. If you connect via Shopify OAuth, we receive your Shopify store URL and the access token necessary to read and write product data on your behalf.

Store and product data

To perform syncs, SyncTec reads product, variant, collection, and order data from your connected Shopify stores. This data is processed in transit and stored temporarily to execute sync jobs. We do not sell or share this data with third parties.

Usage data

We collect information about how you use SyncTec, including pages visited, features used, sync events triggered, and error occurrences. This helps us improve the product and diagnose issues.

Payment information

Billing is handled by Shopify. SyncTec never stores full credit card numbers. We receive and retain billing status, subscription tier, and invoice records.

Providing the service

We use your account and store data exclusively to operate SyncTec — connecting your stores, executing sync jobs, delivering notifications, and maintaining your workspace settings.

Improving the product

Aggregate, anonymised usage data is used to understand which features are valuable, where users encounter friction, and how to prioritise future development.

Communications

We send transactional emails for account events (receipts, sync failures, password resets). We send product updates only if you opt in. You can unsubscribe from product emails at any time.

Service providers

We share data with a small number of third-party processors that help us operate SyncTec — including Shopify (billing), Digital Ocean (infrastructure), and Resend (transactional email). All processors are bound by data processing agreements.

Legal requirements

We may disclose your information if required to do so by law or in response to valid legal process (court order, subpoena, or similar). We will notify affected users to the extent permitted by law.

No data sales

We do not sell, rent, or trade your personal data or your store's product data to any third party, ever.

Account data

Your account data is retained for the life of your account. If you delete your account, we permanently delete all account data within 30 days, except where retention is required by law.

Sync logs

Sync history is retained according to your plan: 30 days on Starter, 90 days on Growth, and unlimited on Enterprise. You can export your sync logs at any time from the dashboard.

Data in transit

All data transmitted between your browser, our servers, and the Shopify API is encrypted using TLS 1.3.

Data at rest

Sensitive data — including Shopify access tokens — is encrypted at rest using AES-256. Encryption keys are managed separately from the data they protect.

Access controls

Access to production systems is limited to engineers on a need-to-know basis, protected by hardware security keys, and audited quarterly.

Access and portability

You can export your account data and sync logs from the dashboard at any time. If you need data in a format we don't support, contact us.

Correction and deletion

You can update your account information from account settings. To delete your account and all associated data, contact support@storelink.io.

GDPR and CCPA

If you are located in the EU or California, you have additional rights under GDPR and CCPA respectively, including the right to object to processing and the right to be forgotten. Contact us at privacy@storelink.io to exercise these rights.

Questions about this Privacy Policy? Reach us at privacy@storelink.io or by mail at SyncTec Inc., 33 Mount Street, Auckland Central, Auckland 1010, New Zealand.