1. About this policy

SynexaTech Labs provides Synexa Catalog Pulse, a Shopify app for read-only product catalog assessments. This policy covers information handled by the app. The support website privacy policy separately covers help-center visits and support correspondence. Shopify and merchant stores have their own privacy notices.

2. Information the app handles

  • Store and access information: Shopify store domain and identifiers, installation status and revision, permission information, authentication timestamps, and encrypted offline access and refresh credentials. Short-lived Shopify identity tokens authenticate embedded requests; browser credentials should never be sent to support.
  • Product catalog information: imported product identifiers, titles, descriptions, status, vendor, product type, tags, SEO fields, variants, SKUs, barcodes, shipping indicators, image references and alt text, and import timestamps or field-availability indicators. Merchants should avoid placing personal information in catalog fields unless appropriate for their store.
  • Assessment information: enabled checks, applicability preferences and product type exceptions, import and assessment status, rule versions, evaluations, findings, scores, usage counts, and historical snapshots.
  • Subscription information: Shopify subscription and checkout references, verified plan and capacity, billing status, and verification timestamps. Shopify handles subscription approval and payment collection. Catalog Pulse does not collect payment-card details.
  • Operational and security information: diagnostic references, limited audit events, background job records, and hashed webhook receipt information used for authentication, deduplication, and safe privacy processing.

Catalog Pulse requests read-only product access. It does not request customer, order, or product-write permissions for its catalog assessments. It does not need customer names, email addresses, shipping addresses, or order histories. Do not send passwords, tokens, customer lists, or payment details to support.

3. Why information is used

We use information to authenticate authorized store access, import catalog data, run the selected deterministic checks, explain findings, retain completed assessment history, enforce verified product capacity, manage subscriptions, investigate failures, prevent abuse, and process privacy requests. Catalog Pulse does not edit Shopify products. Scores describe applicable checks on a completed imported snapshot and do not guarantee commercial outcomes.

4. Providers and disclosure

Shopify provides the store platform, merchant authentication, product APIs, and subscription services. Authorized SynexaTech Labs staff and service providers may handle information as needed for hosting, storage, security, and support. Information may be disclosed when required by law or necessary to protect people or systems or address legal claims. We do not sell catalog information or use it for targeted advertising. Contact us for the providers and processing locations relevant to your installation.

5. Sessions and storefront behavior

The embedded app uses Shopify authentication in Shopify Admin. Offline credentials are encrypted on the server rather than stored in the app's browser interface. Catalog Pulse does not require a storefront theme embed or add a customer-facing widget. Necessary cookies and preferences on the separate support website are described in its website privacy policy.

6. Retention, uninstalling, and deletion

Current catalog data, settings, subscription references, and completed assessment history are retained while needed to provide the installed app. Temporary records and files from finished imports become eligible for cleanup after seven days; this does not remove the current product snapshot or completed assessment history.

When a verified uninstall notification is processed, Catalog Pulse marks the installation inactive, removes stored access credentials, cancels unfinished imports and assessments, and invalidates app subscription entitlements. Store data is queued for deletion on a verified Shopify shop-redaction request or becomes eligible for cleanup after seven days uninstalled. Cleanup includes store-specific private import files and database records. Background work, retries, and an intervening authorized reinstallation affect processing; these triggers do not guarantee an exact deletion timestamp. Deleted data is not guaranteed to return after reinstallation.

Hashed webhook deduplication receipts have a separate retention window of up to 30 days. On store purge, their direct store association is removed. These receipts are not full webhook payload archives. Support correspondence and operational backups are handled separately; contact us about a specific record or backup request.

The app authenticates Shopify's mandatory customer-data, customer-erasure, and shop-erasure notifications. Its customer-request processing records that it does not store customer or order records for catalog assessment. Read Shopify's privacy requirements for the platform's notification process.

7. Your choices and requests

You can change applicability preferences and enabled checks or uninstall the app through Shopify. Use Catalog Pulse support for questions or requests about access, correction, deletion, or a copy of information associated with your store. Include a contact email and relevant store domain without credentials or customer details. We may need proportionate information to verify your identity and connection to the store. Customers of a merchant should contact that merchant about information held by the store.

8. Security and processing locations

The app uses authenticated store access, store-specific authorization, encrypted offline credentials, restricted service access, and verified privacy notifications. Information may be processed where SynexaTech Labs and its providers operate, subject to applicable safeguards. No system can guarantee absolute security. Contact support for operating details relevant to your installation.

9. Contact and changes

Use Catalog Pulse support, choose General question, and use a subject such as Privacy request — Synexa Catalog Pulse. If a support email is displayed in the website footer, that channel is also available. The version and effective date appear above. We may update this policy as the app or information practices change and provide additional notice when required.