Privacy Policy for Exportly Google Sheets Sync

1. Introduction

This Privacy Policy describes how CET TECH LLC (“we,” “us,” or “our”) collects, uses, and shares information when you use our Exportly Google Sheets Sync application (the “App”) for Shopify stores. This App allows Shopify merchants to export their order data to Google Sheets automatically.

By installing or using our App, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Shopify Store Data

When you install our App, we collect and process the following information from your Shopify store:

• Store Information: Store name, domain, email address, timezone, currency, and plan details
• Order Data: Order numbers, dates, customer information, product details, pricing, taxes, shipping information, and order status
• Customer Data: Customer names, email addresses, phone numbers, billing and shipping addresses (only as part of order information)
• Product Information: Product names, SKUs, variants, and pricing (only as part of order information)
• Merchant Information: Store owner contact details and billing information

2.2 Google Account Data

To enable Google Sheets integration, we collect:

• Google Account Information: Email address, name, and profile information from your Google account
• Google Sheets Access: Permission to create, read, and update spreadsheets in your Google Drive
• Authentication Tokens: OAuth tokens to maintain your Google Sheets connection

2.3 App Usage Data

We collect information about how you use our App:

• Configuration Data: Your sync preferences, field mappings, and app settings
• Usage Analytics: Feature usage patterns, sync frequency, and error logs
• Technical Data: IP addresses, browser information, and device identifiers for security and troubleshooting

2.4 Communication Data

• Support Requests: When you contact us for support, we collect your communication and any information you provide

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Core App Functionality

• Data Export: Transfer your Shopify order data to your designated Google Sheets
• Sync Management: Maintain synchronization between your Shopify store and Google Sheets
• Field Mapping: Enable customization of which data fields are exported

3.2 Service Provision and Improvement

• App Operation: Ensure the App functions correctly and efficiently
• Technical Support: Provide customer support and troubleshoot issues
• Service Enhancement: Improve App features and user experience
• Security: Protect against fraud, abuse, and security threats

3.3 Legal Compliance

• Legal Obligations: Comply with applicable laws and regulations
• Terms Enforcement: Enforce our Terms of Service

4. Information Sharing and Disclosure

4.1 Google Services

• Google Sheets API: We share your order data with Google Sheets as part of the core App functionality
• Google Drive: Your exported data is stored in your own Google Drive account

4.2 Third-Party Service Providers

We may share information with trusted third-party service providers who assist us in:

• Cloud Hosting: Secure data processing and storage (e.g., AWS, Google Cloud)
• Analytics: Understanding App usage patterns (anonymized data only)
• Customer Support: Providing technical assistance

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal Process: Court orders, subpoenas, or other legal proceedings
• Law Enforcement: Requests from government authorities
• Rights Protection: Protecting our rights, property, or safety, or that of others

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

5.1 Technical Safeguards

• Encryption: Data is encrypted in transit using TLS/SSL
• Access Controls: Strict access controls and authentication requirements
• Secure Storage: Data is stored in secure, industry-standard cloud infrastructure
• Regular Updates: Security patches and updates are applied promptly

5.2 Organizational Measures

• Employee Training: Staff are trained on data protection practices
• Access Limitation: Access to personal data is limited to authorized personnel only
• Incident Response: We have procedures in place for data breach response

6. Data Retention

6.1 Active Users

• Store Data: Retained while your App subscription is active
• Sync Records: Maintained for operational purposes and kept for 90 days after sync
• Configuration Data: Stored until you uninstall the App

6.2 Inactive Users

• Account Deletion: Data is deleted within 30 days of App uninstallation
• Backup Deletion: Backup copies are purged within 90 days

6.3 Legal Requirements

Some data may be retained longer if required by law or for legitimate business purposes.

7. Your Rights and Choices

7.1 Access and Control

• Data Access: Request access to your personal data
• Data Correction: Request correction of inaccurate information
• Data Deletion: Request deletion of your data (subject to legal requirements)
• Data Portability: Request a copy of your data in a portable format

7.2 Google Integration Control

• Disconnect: You can disconnect your Google account at any time through the App settings
• Revoke Access: Revoke App permissions through your Google Account settings

7.3 Communication Preferences

• Opt-out: Unsubscribe from marketing communications
• Support Communications: Essential service communications cannot be opted out

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries with adequate protection levels
• Standard Contractual Clauses: EU-approved contract terms for international transfers
• Privacy Shield: Compliance with applicable data transfer frameworks

9. Children’s Privacy

Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

10. Regional Privacy Rights

10.1 European Union (GDPR)

If you are in the EU, you have additional rights including:

• Right to Object: Object to processing of your personal data
• Right to Restrict: Request restriction of processing
• Right to Lodge Complaints: File complaints with supervisory authorities

10.2 California (CCPA)

If you are a California resident, you have rights including:

• Right to Know: Know what personal information is collected
• Right to Delete: Request deletion of personal information
• Right to Non-Discrimination: Not be discriminated against for exercising rights

10.3 Other Jurisdictions

We comply with applicable privacy laws in other jurisdictions where we operate.

11. Cookies and Tracking

Our App may use cookies and similar technologies:

• Essential Cookies: Necessary for App functionality
• Analytics Cookies: Help us understand usage patterns (anonymized)
• Authentication Cookies: Maintain your login session

You can control cookie settings through your browser, but this may affect App functionality.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Email Notification: Sending notice to your registered email address
• App Notification: Displaying notices within the App
• Website Posting: Posting updates on our website

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

14. Data Processing Lawful Basis

We process your personal data based on the following lawful bases:

• Contract Performance: Processing necessary for App functionality
• Legitimate Interest: Improving our services and preventing fraud
• Consent: Where you have provided explicit consent
• Legal Obligation: Compliance with applicable laws

15. Third-Party Links

Our App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We recommend reviewing their privacy policies.

16. Data Minimization

We collect and process only the minimum amount of personal data necessary to provide our services effectively.

17. Automated Decision Making

We do not use automated decision-making or profiling that significantly affects you without human oversight.