Privacy Policy

Last updated: April 23, 2026

PIM Sync ("we", "our", or "the App") is a Shopify embedded application that helps merchants manage product information across Shopify, Xano, and Webflow. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

When you install and use PIM Sync, we access the following data through the Shopify Admin API:

Product data — titles, descriptions, images, variants, pricing, tags, and metafields
Market and locale data — multi-market pricing, currency settings, and translations
Shop data — store name, domain, currency, and enabled sales channels

We do not collect or store:

Customer personal information (names, emails, addresses)
Order or payment data
Browsing behavior or analytics from your storefront visitors

2. How We Use Your Data

Synchronizing product information between Shopify, Xano, and Webflow
Managing multi-market pricing and currency conversion
Handling product translations across locales
Managing EU compliance fields (VAT, WEEE, battery directives)
Generating SEO metadata and alt text for product images

3. Data Storage and Security

Product data is stored in Xano (our backend database) and synchronized with your Shopify store and optionally Webflow. Session tokens and ephemeral state are stored in Cloudflare KV with automatic expiration (TTL).

All data is transmitted over HTTPS. We do not sell, rent, or share your data with third parties beyond the services required to operate the App (Shopify, Xano, Cloudflare, Webflow).

4. Third-Party Services

PIM Sync integrates with the following services to provide its functionality:

Shopify — product and store data via the Admin API
Xano — persistent product database (GraphQL API)
Cloudflare — session storage (KV), edge services (Workers), image hosting (R2)
Webflow — CMS sync (optional, merchant-initiated)

Each service has its own privacy policy. We encourage you to review them.

5. Data Retention

We retain your product data in Xano for as long as the App is installed. Session data in Cloudflare KV expires automatically. When you uninstall the App, we delete your session data and shop records within 48 hours. Product data stored in Xano can be deleted upon request.

6. GDPR and Merchant Rights

You have the right to:

Access — request a copy of any data we store about your shop
Correction — request correction of inaccurate data
Deletion — request deletion of your data at any time
Portability — receive your data in a machine-readable format

We comply with Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact) and process all requests within 30 days.

7. Customer Data

PIM Sync does not directly collect, store, or process personal data from your store's customers. If any customer data is incidentally included in product-related API responses, it is not stored or used by the App.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.

9. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Email: ysl@story-story.ai