Privacy Policy

Last Updated: December 19, 2025

Introduction

VSync ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Shopify application that integrates with Meta's Conversion API to track customer purchase data.

Information We Collect

When you install and use VSync, we collect and process the following types of information:

Store Information:

Shop domain and store details
API access credentials (securely stored)
App configuration settings

Order Data:

Order ID, order number, and order status
Order total, currency, and line items
Order creation and update timestamps

Customer Data:

Customer email address
Customer name (first and last)
Customer ID and order history
Purchase behavior and transaction details

How We Use Your Information

We use the collected information for the following purposes:

Track Purchase Events: Monitor and track new customer purchases in your Shopify store
Meta Conversion API Integration: Send purchase event data to Meta (Facebook) to optimize advertising campaigns and measure conversion performance
App Functionality: Provide core features and maintain the operational integrity of the app
Analytics and Improvements: Analyze usage patterns to improve app performance and features
Compliance: Meet legal obligations and respond to data subject requests under privacy laws

Third-Party Data Sharing

We share certain information with third-party services necessary for app functionality:

Meta (Facebook):

Customer purchase data is transmitted to Meta's Conversion API to enable conversion tracking and advertising optimization. This includes customer email addresses (hashed), order values, and purchase events. Meta's use of this data is governed by their own privacy policy.

Service Providers:

We use trusted service providers to host our database (PostgreSQL) and application infrastructure. These providers have access to data only to perform services on our behalf and are obligated to protect your information.

We do not sell your personal information to third parties. We only share data as necessary to provide the app's core functionality or as required by law.

Data Security

We implement industry-standard security measures to protect your information:

Encrypted data transmission using HTTPS/TLS
Secure database storage with access controls
HMAC signature verification for all webhook communications
OAuth 2.0 authentication for API access
Regular security updates and monitoring

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Your Rights and Choices

Under applicable privacy laws (including GDPR and CCPA), you have the following rights:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data (subject to legal obligations)
Data Portability: Request transfer of your data to another service
Objection: Object to processing of your personal data in certain circumstances

To exercise these rights, please contact us using the information provided below. We will respond to your request within 30 days.

Data Retention and Deletion

We retain your data only as long as necessary to provide the app's services or as required by law:

Active Store Data: Retained while the app is installed and in use
Uninstallation: When you uninstall the app, all session data is immediately deleted
GDPR Compliance: Shop data is automatically deleted 48 hours after app uninstallation via our shop/redact webhook
Customer Data Requests: We honor customer data access and deletion requests via Shopify's mandatory compliance webhooks

GDPR Compliance

VSync is fully compliant with Shopify's mandatory GDPR/privacy requirements:

customers/data_request: We respond to customer data access requests
customers/redact: We delete customer data upon request
shop/redact: We delete all shop data 48 hours after app uninstallation

These webhooks are automatically processed to ensure timely compliance with data subject requests.

Children's Privacy

VSync is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically.

Material changes will be communicated to you via email or through the app interface. Continued use of VSync after changes constitutes acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

VSync Support
Email: hannwin.dev@gmail.com
Response Time: Within 48 hours

For GDPR-related requests or data subject access requests, please use the same contact information with "GDPR Request" in the subject line.

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our legal basis for processing your personal data includes:

Contractual Necessity: Processing is necessary to perform our services
Legitimate Interest: To improve our app and prevent fraud
Consent: Where you have provided consent for specific processing activities
Legal Obligation: To comply with applicable laws and regulations

Acceptance of This Policy

By installing and using VSync, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with this policy, please uninstall the app.