Privacy policy

Controller

Nico Münster Roman Rau Jan Felix Schoolmann GbR (Sayweb) Contact: kontakt@sayweb.de

What data does the app process?

• Shop data (OAuth): shop domain, access token, and technical session data for Shopify admin login.
• Product data: variant IDs and tier pricing configuration stored as Shopify product metafields (no separate customer database for prices).
• Import log: optional metadata about CSV imports (file name, row count, success/errors) in our database.

What we do not store

We do not store end-customer profiles, order history, or payment data. Tier prices apply publicly per variant to all storefront visitors.

Hosting & processors

The app runs on servers in the EU (Fly.io, Frankfurt region). The database (PostgreSQL) is also hosted on Fly.io. Shopify processes shop and order data as the platform operator.

Retention

Sessions, language preferences, and import logs in our database are deleted when the app is uninstalled or when Shopify sends a shop redaction webhook. Metafields remain in the merchant's shop until removed or the app is uninstalled (per Shopify behavior).

GDPR webhooks

The app responds to Shopify compliance webhooks (customer data request, redaction). Because we do not store personal customer data in the app database, additional exports are usually not required.