Privacy Policy

Introduction

ShopSheets ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application that integrates with Google Sheets.

By installing and using ShopSheets, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Shopify Store Data

When you install ShopSheets, we request the following permissions from your Shopify store:

• Read Orders (read_orders) - To sync your order data to Google Sheets
• Read and Write Products (write_products) - To sync product information and enable two-way updates
• Read Fulfillments (read_fulfillments) - To sync fulfillment and shipping data

We only access the data necessary to provide our synchronization service. We do not access or store customer payment information, credit card details, or other sensitive financial data.

Google Account Data

To create and update Google Sheets on your behalf, we request:

• Google Drive (drive.file) - To create spreadsheet files in your Google Drive
• Google Sheets (spreadsheets) - To read and write data to your spreadsheets
• Google Apps Script (script.projects) - To deploy automation scripts for real-time sync

We only access files that ShopSheets creates. We do not access other files in your Google Drive.

Account Information

We collect:

• Your Shopify store domain and shop ID
• Your Google account email address
• OAuth access tokens and refresh tokens for both Shopify and Google
• Billing and subscription information

Usage Data

We automatically collect:

• Sync activity logs (timestamps, data types synced, success/failure status)
• Error logs and debugging information
• Feature usage statistics (which features you use, how often)

How We Use Your Information

We use the information we collect to:

• Provide our service - Sync data between your Shopify store and Google Sheets
• Process webhooks - Receive real-time updates from Shopify when data changes
• Maintain and improve - Monitor service performance, fix bugs, and develop new features
• Provide support - Troubleshoot issues and respond to your inquiries
• Send notifications - Alert you about service updates, billing issues, or important changes
• Ensure security - Detect and prevent fraud, abuse, or security threats

We do not sell, rent, or share your data with third parties for marketing purposes.

Data Storage and Security

Where We Store Data

Your data is stored securely in our database hosted by Supabase (a PostgreSQL database service). OAuth access tokens and refresh tokens are encrypted at rest using industry-standard encryption.

Security Measures

We implement appropriate technical and organizational measures to protect your data:

• Encryption of sensitive data at rest and in transit (HTTPS/TLS)
• Secure OAuth 2.0 authentication flows
• Regular security updates and patches
• Access controls and authentication requirements
• Monitoring for suspicious activity

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Cached sync data - Stored for 7 days, then automatically deleted
• Sync activity logs - Retained for 90 days for troubleshooting
• Account information - Retained until you uninstall the app or request deletion

When you uninstall ShopSheets, we delete your OAuth tokens and stop accessing your Shopify and Google data. Cached data is deleted within 7 days. Account records may be retained for up to 30 days for billing reconciliation.

Third-Party Services

ShopSheets integrates with the following third-party services:

• Shopify - E-commerce platform (see Shopify Privacy Policy)
• Google Workspace - Cloud productivity suite (see Google Privacy Policy)
• Supabase - Database hosting (see Supabase Privacy Policy)
• Render - Application hosting (see Render Privacy Policy)

These services have their own privacy policies governing their use of your information.

Your Rights and Choices

Access and Portability

You can access your data at any time through your Google Sheets (which you own and control) and your Shopify Admin. You can export your data from either platform.

Correction and Deletion

To update or correct your information, modify it in your Shopify store or Google Sheets. To delete your data:

• Uninstall ShopSheets from your Shopify Admin
• Revoke Google access in your Google Account settings
• Contact us at mail@minim-l.com to request complete data deletion

Opt-Out of Communications

You can opt out of non-essential emails by clicking the unsubscribe link in any email we send. We will still send service-related notifications (billing, security alerts, critical updates).

GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at mail@minim-l.com.

CCPA Rights (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with rights regarding your personal information:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

Cookies and Tracking

ShopSheets uses minimal cookies and tracking technologies:

• Session cookies - To maintain your login session (required for functionality)
• OAuth state cookies - To prevent CSRF attacks during authentication (required for security)

We do not use third-party advertising cookies or tracking pixels.

Children's Privacy

ShopSheets is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using ShopSheets, you consent to the transfer of your information to the United States and other countries where our service providers operate.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses approved by the European Commission
• Compliance with Privacy Shield principles (where applicable)
• Use of service providers with robust data protection practices

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email notification (for significant changes)

Your continued use of ShopSheets after changes are posted constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: mail@minim-l.com

Response time: We respond to privacy inquiries within 48 hours.

Compliance

ShopSheets complies with:

• Shopify's App Store requirements and policies
• Google's API Services User Data Policy
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• CAN-SPAM Act