Privacy Policy

Last updated: May 2026

This Privacy Policy describes how SFTP Connector ("the App", "we", "us", or "our") collects, uses, and protects information when you install and use the App through the Shopify platform. By installing or using the App, you agree to the practices described in this policy.

1. Information We Collect

We collect only the information necessary to provide the App's functionality:

• Shopify Store Data — Your store domain, OAuth access token (used exclusively to make authorized API calls on your behalf), and order data required for SFTP export.
• Order Information — Order details including order IDs, order numbers, line items, shipping information, and fulfillment status, used solely to generate export files.
• SFTP Credentials — Host, port, username, and password for your SFTP server. Passwords are encrypted at rest using AES-128 encryption and are never shared with third parties.
• App Configuration — Scheduler settings, CSV field mappings, and sync preferences you configure within the App.
• Usage Logs — File transfer logs (file name, type, status, timestamp) used for monitoring and troubleshooting.
• Billing Information — Subscription plan and status, managed via Shopify's billing API. We do not store payment card details.

2. How We Use Your Information

• To authenticate with your Shopify store and perform authorized API operations.
• To export Shopify orders as CSV files to your configured SFTP server.
• To import tracking information from your SFTP server and update Shopify fulfillments.
• To operate scheduled sync jobs according to your configuration.
• To display logs and monitoring data within the App interface.
• To manage your subscription and enforce plan-based feature access.
• To investigate errors, improve reliability, and provide support.

3. Data Storage and Security

Your data is stored in a secured database. SFTP passwords are encrypted at rest using AES-128 encryption before storage and are decrypted only at the time of an SFTP connection — they are never logged or transmitted elsewhere. Shopify access tokens are stored securely and used exclusively for API calls to your own store.

We implement industry-standard security practices including encrypted connections (HTTPS/TLS), access controls, and regular reviews. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal or store data to third parties. We may disclose information only in the following limited circumstances:

• Service Providers — Infrastructure and hosting providers who process data solely on our behalf and under confidentiality obligations.
• Legal Requirements — If required by applicable law, court order, or governmental authority.
• Business Transfers — In connection with a merger, acquisition, or sale of business assets, with prior notice to affected merchants.

5. Shopify API Compliance

The App accesses your Shopify store data solely through the permissions you grant during installation. We use only the API scopes necessary for the App's stated functionality. We comply with Shopify's API Terms of Service and Partner Program Agreement.

6. Data Retention

We retain your store data and configuration for as long as the App is installed on your store. File transfer logs are retained for operational and troubleshooting purposes. Upon uninstallation, we will delete your store's data within 30 days, except where retention is required by law.

7. Your Rights

You have the right to:

• Request access to the personal data we hold about your store.
• Request correction or deletion of your data.
• Uninstall the App at any time, which will stop all data processing.

To exercise these rights, contact us at the email address below.

8. Cookies and Tracking

The App is embedded within the Shopify Admin and does not independently use cookies for tracking or advertising purposes. Session management is handled by Shopify's embedded app framework.

9. Children's Privacy

The App is intended for use by Shopify merchants and is not directed at individuals under the age of 16. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the App or by email. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us:
Email: rajat.bhatia.7150@gmail.com