Softside Connect
Privacy policy
How we handle store and customer data when merch is synced and orders are routed for fulfilment.
Who we are
Softside Connect is a Shopify app published by [LEGAL ENTITY NAME], [REGISTERED ADDRESS] ("Softside", "we"). We are the data controller for the data described here. You can reach us at tech@softsidemerch.com.
What the app accesses
The app only reads what it needs to sync products and route orders. It does not build customer profiles, and it never sells data.
- Store data: your shop domain, the access token Shopify issues at install, and your app settings.
- Product data: products, variants, prices, images and inventory for the items the app manages.
- Order data: line items, totals, fulfilment status and refunds for orders that contain Softside merch.
- Customer data: the buyer's name, email address and shipping address on those orders. We need these to have the order made and delivered.
Why we use it
- To publish approved merch into your store and keep it in step.
- To send paid orders to our fulfilment partners.
- To show fulfilment and refund status back in your admin.
- To email you when a sync or an order needs your attention.
- To track royalties owed to the artist behind each design.
Who we share it with
We share the minimum needed to deliver an order. Our processors are our print and fulfilment partners, our email provider (Amazon SES) and our hosting provider (Amazon Web Services, in the United States). Each one is bound to use the data only on our instructions.
How long we keep it
Order records are kept for [RETENTION PERIOD], so that royalties, refunds and support requests can be handled. Raw webhook payloads are deleted after [RETENTION PERIOD]. When you uninstall the app, we delete your access token straight away and remove the rest within [RETENTION PERIOD], unless the law requires us to keep it longer.
Your rights and your customers' rights
Depending on where you live, you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to tech@softsidemerch.com and we will answer within [NUMBER] days.
We also support the requests Shopify sends on behalf of shoppers. When a customer asks a merchant for their data or asks to be erased, Shopify notifies the app and we act on that request.
How we protect it
Data is encrypted in transit. Access tokens and credentials are held in a managed secret store, and access to production systems is limited to the people who run the service.
Changes
If we change this policy we will update the date at the top, and tell merchants about anything significant before it takes effect.