1. Introduction
This Privacy Policy explains how Etsy Integration - EcomZenith, operated by EcomZenith Technologies LLP ("EcomZenith", "we", "our", or "us"), collects, uses, discloses, and protects information when merchants use our Shopify app and related website services.
Our service is designed for business users who connect Shopify and Etsy stores to sync products, inventory, and order workflows. We are committed to handling personal data responsibly and in line with applicable data protection laws, including the GDPR where applicable.
2. Privacy Policy Scope
This policy applies to data processed through our app, website, support channels, and operational systems used to deliver the Etsy-Shopify integration service.
When merchants use our app to process customer data, merchants typically act as data controllers and EcomZenith acts as a data processor for service delivery.
3. User Information and Data We Collect
- Merchant and store details such as store name, store URL, store email, account identifiers, and basic settings required for integration.
- Product and catalog data such as titles, descriptions, images, SKUs, variants, inventory, and pricing fields.
- Order-related data required for sync and support, including order IDs, status, items, fulfillment-related fields, and timestamps.
- Limited customer personal data tied to order processing and sync, such as customer name, shipping details, billing details, email, and phone when available through connected platforms.
- Technical and operational data such as logs, IP address, browser/device metadata, and diagnostics used for security, reliability, and troubleshooting.
4. Use of Information
- To provide and maintain the Etsy-Shopify integration service.
- To authenticate merchant connections and process sync jobs.
- To support product, inventory, and order synchronization workflows.
- To monitor service health, prevent abuse, and resolve technical issues.
- To provide customer support and respond to merchant requests.
- To comply with legal obligations and enforce platform/security requirements.
5. Shopify Protected Customer Data Commitments
EcomZenith processes customer personal data only as needed to operate the app features requested by the merchant. We do not sell customer data and we do not use customer data for advertising or unrelated profiling.
- Data minimization: we collect only what is necessary for integration functionality.
- Purpose limitation: data is used only for sync, operations, and support.
- Access control: data access is limited to authorized personnel on a strict need-to-know basis.
- Security safeguards: encrypted transit, restricted internal access, and secure infrastructure controls.
6. Legal Bases for Processing (GDPR Context)
Depending on the context, we process data to perform a contract, to pursue legitimate interests such as service security and reliability, to comply with legal obligations, or based on consent where required.
7. Disclosure of Information and Subprocessors
We do not sell personal information. We may share data with trusted service providers strictly to operate the service.
- Cloud hosting and infrastructure providers (including AWS).
- Monitoring and observability tools used to maintain reliability and incident response (including Datadog).
- Legal and regulatory authorities when disclosure is required by law.
8. What are Cookies and What Information does it gather?
Cookies are small text files that are stored on your device when you visit a website or use an application. We use cookies and related technologies to keep sessions secure, maintain essential functionality, and improve service performance.
The information gathered through these technologies may include browser details, device type, session activity, pages visited, and technical diagnostics. We use this information for security, reliability, and analytics purposes connected to service improvement.
You can manage cookie behavior through your browser settings. If certain cookies are disabled, some parts of the website experience may not function as intended.
- Strictly necessary cookies: required for core operation such as authentication and secure access.
- Analytical/performance cookies: help us understand usage patterns and improve website/app performance.
- Functionality cookies: remember preferences to improve user experience.
- Session cookies: temporary cookies that typically expire when your browsing session ends.
9. Data Retention and Deletion
We retain data only for as long as needed to provide the service and meet legal obligations.
When the app is uninstalled, associated merchant and related customer data is deleted or irreversibly anonymized from active systems within 48 hours, unless longer retention is legally required.
Merchants can request deletion or data-handling clarification at legal@ecomzenith.com.
10. Europe Considerations (GDPR and Cross-Border Transfers)
Because our service and providers may operate across regions, data may be processed outside the merchant's country. Where required, we apply appropriate safeguards for lawful cross-border transfers.
11. Security Measures
- Encryption in transit using TLS/HTTPS.
- Role-based and need-to-know internal access controls.
- Service monitoring and security review processes.
- Reasonable technical and organizational safeguards to protect against unauthorized access, loss, or misuse.
12. Your rights under the GDPR
If you are in the EEA, UK, or another jurisdiction applying GDPR-style protections, you may have specific rights regarding your personal data, subject to applicable legal conditions.
To exercise these rights, contact us at legal@ecomzenith.com. We may ask for reasonable verification before processing requests.
- Right of access: request confirmation and a copy of personal data we process.
- Right to rectification: request correction of inaccurate or incomplete personal data.
- Right to restriction of processing: request limited processing in specific circumstances.
- Right to object: object to processing based on legitimate interests, including certain direct communications.
- Right to erasure: request deletion where retention is no longer necessary or where applicable law supports deletion.
- Right to data portability: request your data in a structured, commonly used format where legally applicable.
13. Limitation of Liability
We implement reasonable safeguards to protect data and maintain service reliability. However, no internet-based system can be guaranteed to be fully secure or uninterrupted at all times.
To the maximum extent permitted by applicable law, EcomZenith is not liable for indirect, incidental, special, consequential, or punitive losses arising from use of the website or services, including losses related to third-party platform outages, API limitations, or events outside our reasonable control.
Nothing in this section limits liability where such limitation is prohibited by law.
14. Children's Privacy
Our services are intended for businesses and are not directed to children.
15. Policy Updates
We may update this Privacy Policy from time to time. Material updates will be reflected by revising the effective date on this page and, where appropriate, by additional notice.
16. Final Details and Contact Information
EcomZenith Technologies LLP
B-128, Ground Floor, Sector-2 Gautam Buddha Nagar, Uttar Pradesh 201301, India.
Email: support@ecomzenith.com, legal@ecomzenith.com
DPO/Privacy contact: legal@ecomzenith.com
Phone: +91 9194235152
Website: https://ecomzenith.com/
Governing jurisdiction: India, Uttar Pradesh. For privacy requests, corrections, or deletion requests, write to legal@ecomzenith.com.
