Ezyupdate Privacy Policy

1. What Ezyupdate accesses

To do its job, Ezyupdate reads and — for imports — writes the store data you explicitly choose to export or upload. Depending on the job, that can include products, collections, customers, orders, and metaobjects. It only accesses what your chosen export or import job covers; it does not continuously sync or monitor your store, and it does not read data outside the jobs you run.

2. What we store

• Your Shopify OAuth access token, so the app can call the Shopify Admin API on your behalf.
• Job metadata — type, entity, mode, status, row counts, error counts, timestamps, and per-row log messages — plus any recurring schedules you set up, so you can see and re-run your job history.
• Export files and uploaded import files, in Amazon S3, for up to 14 days, after which they are automatically deleted.

We do not maintain a separate database of your customers, orders, products, or metaobjects. Data outside the 14-day export/import file window exists only inside your own Shopify store.

3. Customer and order data

If you use Ezyupdate to export customer or order records, that data (which can include names, emails, phone numbers, and addresses) is written to a spreadsheet file in our export storage and made available only to you through a signed, time-limited download link. It is automatically deleted after 14 days. We do not use this data for any purpose other than producing the file you requested.

4. Data deletion

Uninstalling the app triggers Shopify's app/uninstalled and mandatory shop/redact webhooks, which delete all job history, schedules, and the stored access token for your store. Customer data requests and redaction requests (Shopify's customers/data_request and customers/redact webhooks) are handled per Shopify's GDPR requirements.

5. Sub-processors

Ezyupdate relies on Shopify (the source and destination of all store data) and Amazon Web Services (Amazon S3, used to hold export and import files for the 14-day window described above). We do not sell your data or share it with third parties for their own purposes.

6. Retention

Export and import files are retained for up to 14 days and then deleted automatically. Job metadata and schedules are retained until you delete them or uninstall the app, at which point they are removed as described in Section 4.

7. Security

Access tokens and files are stored in access-controlled infrastructure, and download links are signed and time-limited. No method of transmission or storage is completely secure, but we implement reasonable safeguards designed to protect your data.

8. Changes

We may update this policy and will post the revised version with an updated "Last updated" date.

9. Contact

Questions about this policy or your data: cloudstarptyltd@gmail.com.