Privacy Policy for AirSync

1. Company Information

2. Information We Collect

2.1 Shopify Store Information

When you install AirSync, we collect and process the following information from your Shopify store:

• Store Data: Store name, domain, contact information, and basic store settings
• Product Information: Product details, descriptions, prices, inventory, and product images
• Order Data: Order details, customer information, billing and shipping addresses
• Customer Information: Customer names, email addresses, and order history (when applicable)
• Authentication Data: OAuth tokens and session information for secure access

2.2 Airtable Integration Data

To provide synchronization services with Airtable, we collect:

• Airtable Account Information: Workspace details, base structures, and user email
• Access Tokens: OAuth tokens for authenticated access to your Airtable workspace
• Synchronization Preferences: Your chosen data mapping and sync settings
• Sync History: Logs of synchronization activities and timestamps

2.3 Technical Information

• Usage Data: How you use the app, features accessed, and interaction patterns
• Error Logs: Technical errors and debugging information to improve app performance
• Device Information: Browser type, IP address, and operating system (anonymized)

3. How We Use Your Information

3.1 Primary Services

• Synchronize data between your Shopify store and Airtable workspace
• Maintain real-time or scheduled data updates as configured
• Provide data mapping and transformation services
• Enable two-way data synchronization when configured

3.2 App Operation and Improvement

• Authenticate and authorize access to both Shopify and Airtable services
• Monitor app performance and identify technical issues
• Provide customer support and troubleshooting assistance
• Improve app functionality and user experience
• Ensure data integrity and synchronization accuracy

3.3 Communication

• Send important app updates and security notifications
• Provide customer support and respond to inquiries
• Share product updates and new feature announcements (with your consent)

4. Information Sharing and Disclosure

4.1 Third-Party Services

We share your information with the following third-party services as necessary for app functionality:

• Shopify: To access your store data and perform authorized operations
• Airtable: To synchronize data with your connected Airtable workspace
• Hosting Providers: To store and process data securely in the cloud

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal process, subpoenas, or court orders
• Requests from law enforcement or government agencies
• Protection of our rights, property, or safety
• Investigation of potential violations of our terms of service

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Security

5.1 Security Measures

• Encryption: All data is encrypted in transit using TLS/SSL protocols
• Access Controls: Strict access controls and authentication requirements
• Regular Audits: Regular security audits and vulnerability assessments
• Secure Storage: Data stored in secure, SOC 2 compliant data centers

5.2 OAuth Security

• OAuth tokens are securely stored and encrypted
• Token refresh and expiration handling to maintain security
• Secure state parameters to prevent CSRF attacks
• Limited scope access to minimize data exposure

6. Data Retention

6.1 Retention Periods

• Active Connections: Data is retained while your connection is active
• Disconnected Services: Data is deleted within 30 days of disconnection
• Support Data: Support-related communications retained for 2 years
• Legal Requirements: Some data may be retained longer if required by law

6.2 Data Deletion

You can request immediate data deletion by:

• Uninstalling the AirSync app from your Shopify store
• Disconnecting your Airtable integration within the app
• Contacting us directly at info@cettechventure.com

7. Your Rights and Choices

7.1 Access and Control

• Access: Request access to your personal data we process
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances

7.2 Consent Management

• Withdraw consent for data processing at any time
• Opt-out of non-essential communications
• Manage synchronization settings and data sharing preferences

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses for EU data transfers
• Adequacy decisions where applicable
• Privacy Shield or equivalent frameworks
• Binding Corporate Rules where appropriate

9. Children’s Privacy

AirSync is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

10. Cookies and Tracking

10.1 Cookies Used

• Essential Cookies: Required for app functionality and authentication
• Performance Cookies: Help us understand how the app is used
• Functional Cookies: Remember your preferences and settings

10.2 Third-Party Tracking

We may use third-party analytics services to improve our app. These services may use cookies and similar technologies to collect usage information.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will:

• Post the updated policy on this page with a new effective date
• Notify you of significant changes via email or app notification
• Provide at least 30 days notice for material changes
• Seek your consent for changes that expand our use of your data

12. Regional Privacy Rights

12.1 European Union (GDPR)

If you are in the EU, you have additional rights under the General Data Protection Regulation:

• Right to be informed about data processing
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision making

12.2 California (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising CCPA rights

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

14. Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at:

Email: dpo@cettechventure.com

15. Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.