Privacy Policy

1.Introduction

Collectify (“Collectify”, “we”, “us”) provides a platform that connects to your Shopify store, keeps a synchronised copy of your store data, and lets you manage it from one dashboard at collectify.sbs. This policy explains what information we access and collect, why, how we protect it, and the choices you have.

By creating an account or connecting a store, you agree to the practices described here. If you do not agree, please do not use the service.

2.Information we collect

We collect only what we need to provide the service:

• Account information: your name, email address and password (stored as a secure hash).
• Store connection details: your store domain, the Admin API access token you provide (encrypted before storage) and, where configured, your webhook signing secret.
• Store data from Shopify: see “Data we access through Shopify” below.
• Usage and technical data: IP address, browser type, device information and logs of requests and sync jobs, used for security, diagnostics and improving the service.
• Messages you send us, for example through the contact form.

3.Data we access through Shopify

When you connect a store, Collectify uses the Shopify Admin API, within the scopes you grant, to read and — when you make changes in Collectify — write store data. Depending on those scopes this can include products and variants, collections, inventory, orders and draft orders, customers and their contact details, fulfillments, refunds, discounts, shipping zones, markets, selling plans, blogs, articles, pages, menus, files and metafields.

After the initial import, Shopify sends us webhook notifications when this data changes so that your copy in Collectify stays current. We verify the signature of every webhook before processing it.

Customer information from your store is processed on your behalf and on your instructions. You remain responsible for having a lawful basis to share it with us and for your own privacy notice to your customers.

4.How we use information

• To provide the service: syncing, displaying and updating your store data, and pushing your edits back to Shopify.
• To secure the service: authenticating users, verifying webhooks, detecting abuse and investigating incidents.
• To support you: answering your messages and troubleshooting sync issues.
• To manage your subscription and send essential service notices.
• To improve Collectify using aggregated, non-identifying usage information.

We do not sell your data or your customers’ data, and we do not use your store data for advertising.

5.Storage and security

Your data is stored on servers operated for Collectify and transmitted over encrypted HTTPS connections. Access tokens are encrypted at rest and are only used server-side to communicate with Shopify; they are never sent to your browser. Each store’s data is isolated so that it is only visible to that store’s authorised users.

No method of transmission or storage is completely secure, but we apply reasonable technical and organisational measures and review them regularly.

6.Sharing

We share information only with Shopify (to operate the connection you asked for), with service providers who host or help us run Collectify under confidentiality obligations, or when required by law. If Collectify is involved in a merger or acquisition, information may be transferred as part of that transaction, subject to this policy.

7.Retention and deletion

We keep your account and synced store data for as long as your store is connected and your account is active.

When you disconnect a store — by uninstalling the custom app or revoking its token in Shopify — Collectify can no longer access it. When you remove the store from Collectify or ask us to, we delete the synced store data and the stored access token for that store within a reasonable period. Limited logs may be kept for a short period for security and legal purposes before they are deleted.

8.Your rights and choices

You can access and update your account details from your dashboard, and you can ask us to export or delete your data at any time. Depending on where you live, you may have additional rights, such as objecting to or restricting certain processing. To exercise any of these rights, contact us at the address below.

9.Cookies and local storage

We use essential cookies and your browser’s local storage to keep you signed in and to remember preferences such as language and light or dark theme. We do not use third-party advertising cookies.

10.Changes to this policy

We may update this policy as Collectify evolves. When we make material changes, we will update the date above and, where appropriate, notify you by email or in the dashboard.