Privacy policy

This policy explains how Wezy EU Omnibus (the "Service") processes data to provide its Shopify app. Merchants remain responsible for their store data, while Wezy acts as a technical service provider for the processing required to operate the Service.

Data we process

• Store and installation identifiers, the myshopify.com domain, currency, time zone, and synchronization status.
• Catalog information needed by the Service, including product and variant identifiers, titles, handles, SKUs, prices, compare-at prices, and observation timestamps.
• Shopify sessions and access credentials required for authentication, together with administrator information Shopify provides for an authorized session.
• Minimal technical information needed for reliable synchronization, security, error handling, and support.

For B2B price tracking, the app stores company location identifiers, company and location names, catalog assignments and price histories. It reads the signed-in customer identifier and company permissions to restrict private storefront responses; these customer identifiers are not retained by this feature. It does not request order access. Customer privacy request payloads are not retained.

Purposes and legal bases

We use this data to authenticate the store, track observed prices, calculate and publish the 30-day lowest price, keep the catalog synchronized, prevent abuse, and provide support. Processing is necessary to provide the Service requested by the merchant and for our legitimate interests in security and reliability.

Sharing and transfers

Data is available only to the people and service providers that need it to operate the Service, including Shopify and Wezy's hosting and database providers. Wezy does not sell data, use it for targeted advertising, or profile customers. You can request the current list of subprocessors and hosting regions at support@wezy.app.

Retention and deletion

Catalog and price-history data is retained while the app is installed so that we can provide the Service. Uninstalling the app ends processing and removes active sessions. Shopify's mandatory store-redaction request triggers permanent deletion of the store's remaining application data. Operational logs and rotating backups are retained only as long as needed for security, troubleshooting, and recovery, then deleted or anonymized according to the providers' configured retention periods.

After a store deletion, we retain only an opaque fingerprint of the deletion request to prevent the same delivery from deleting a later installation. This record contains no store domain, store identifier, customer data, session, or request contents.

Security

The Service uses HTTPS, Shopify's official authentication, signed request verification, minimal permissions, store-level data separation, and restricted access to secrets. Access credentials and customer data are never intentionally written to application logs.

Your rights

Depending on applicable law, including the GDPR and CPRA, individuals may request access, correction, deletion, restriction, or objection. Requests concerning a store's customers should first be sent to the merchant; Shopify then forwards mandatory requests to installed apps. Other privacy requests can be sent to support@wezy.app.

Changes to this policy

This policy may change as the Service or legal requirements evolve. The date above identifies the current version. Where required by law, we will provide reasonable notice before a material change takes effect.