Privacy Policy

01

Scope and controller

This Privacy Policy applies to the CaptainSync Shopify app and the public CaptainSync website. The data controller for the processing described here is the CaptainSync app developer identified in the Shopify App Store listing.

Privacy questions and data-rights requests can be sent to y.sentuerk@reply.de.

02

Information we process

CaptainSync processes only the information required to connect stores, compare Metafield Definition schemas, apply changes a merchant explicitly approves, and preserve an operational history.

04

Purposes and legal bases

• Provide the service: authenticate Shopify users, connect stores, run Compare and Sync, show results, provide support, and administer subscriptions. This processing is necessary to perform the service requested by the merchant.
• Protect the service: authorize organization access, prevent misuse, diagnose failures, maintain reliable background jobs, and secure accounts. This supports our legitimate interest in operating a safe and reliable service.
• Maintain accountability: retain explicit Sync confirmations, operation results, and subscription state. This supports contract administration, security, and the establishment or defense of legal claims.
• Meet legal obligations: respond to valid privacy requests, Shopify compliance webhooks, and lawful requests from authorities where required.

CaptainSync does not use merchant information for advertising, profiling, or unrelated marketing, and does not make decisions with legal or similarly significant effects using automated profiling.

05

Sharing and service providers

We do not sell personal information and do not share it for cross-context behavioral advertising. Information is disclosed only where needed to operate CaptainSync:

• Shopify: authentication, Admin API access, App Pricing, subscription reconciliation, and mandatory privacy webhooks. Shopify processes information under its own Privacy Policy.
• Upsun / Platform.sh: application hosting, network delivery, operational logs, and managed PostgreSQL database services. CaptainSync's primary production environment is hosted in Upsun's Germany region.
• Authorities or professional advisers: only when required by law or reasonably necessary to protect rights, security, users, or the service.

Shopify and its service providers may process information in countries outside the merchant's country. Their contractual and legal transfer safeguards apply to that processing. The primary CaptainSync application and database are hosted in Germany.

06

Retention and deletion

• CaptainSync configuration, Compare snapshots, Sync history, and subscription records are retained while needed to provide the installed app and its audit history.
• Expired online sessions and offline sessions whose access and refresh credentials can no longer be used are removed by a daily cleanup process.
• Pairing invitations are single-use and expire after 24 hours. Only a SHA-256 hash of an invitation token is stored; the raw token is not persisted.
• Deleting a Sync Profile in CaptainSync deletes its stored Compare and operational Sync history, including item-level results. Compact confirmation and execution audit evidence is retained separately for accountability.
• When the app is uninstalled, CaptainSync deletes Shopify sessions and cancels the local subscription entitlement. Shopify generally sends the mandatory shop/redact request approximately 48 hours after uninstall. On receipt, CaptainSync deletes the store connection and all profiles, Compare data, Sync runs, item results, jobs, and subscription records that depend on that store, including the separately retained audit evidence.

Limited residual copies may remain temporarily in infrastructure backups or security logs according to the service provider's standard lifecycle. They are isolated from ordinary use and expire through that lifecycle unless longer retention is legally required.

07

Security

CaptainSync uses HTTPS/TLS in transit, Shopify OAuth, expiring access credentials, organization-scoped authorization, managed PostgreSQL infrastructure, and restricted production secrets. Shopify OAuth access and refresh credentials are stored in the server-side session database used by the Shopify app framework. CaptainSync does not display these credentials or write them to application logs. Legacy manually supplied access tokens, if any remain, are protected with CaptainSync's AES-256-GCM encryption layer.

No online service can guarantee absolute security. Merchants should protect their Shopify accounts, limit staff access, and contact us promptly if they suspect unauthorized CaptainSync activity.

08

Your privacy rights

Depending on applicable law, an individual may have rights to request access, correction, deletion, restriction, objection, or portability of personal information, and to withdraw consent where consent is the legal basis. An individual may also have the right to complain to a competent data-protection authority.

Send a request to y.sentuerk@reply.de. We may need to verify the requester's identity and relationship to a Shopify store before acting. Because merchants control their own store and customer relationships, a merchant's customer should ordinarily direct store-related privacy requests to that merchant. CaptainSync will respond to valid Shopify compliance webhooks as required.

09

Changes to this policy

We may update this policy when CaptainSync's functionality, service providers, or legal obligations change. The date at the top identifies the current version. Material changes will be communicated through an appropriate channel where required.