Privacy Policy

1. Responsible entity

SYNTH TECH // SALIH KURTLAR
Stresemann Straße 29
28207 Bremen
Germany

Email: hallo@salihkurtlar.de

2. Scope

This Privacy Policy applies to SYNTH StoreOps, including the embedded Shopify app, its public pricing and sign-in pages, support interactions, and related technical services.

3. Information processed by StoreOps

StoreOps is designed to process only the information needed to provide its merchant-facing operational features.

• Store connection data: Shopify store domain, store name, technical store identifiers, granted app scopes, installation state, and encrypted authentication credentials.
• Operational store data: order identifiers and operational order information such as order status, fulfillment status, item quantities and totals, plus product, collection, location and Online Store navigation data required by enabled StoreOps features.
• Protected customer data: StoreOps is designed not to request or persist customer names, customer email addresses, customer phone numbers, billing addresses, or shipping addresses for its current Level 1 feature set.
• Technical data: limited request and security information such as timestamps, IP addresses, browser or user-agent information, and server events may be processed when necessary to operate, secure and troubleshoot the service.
• Support data: information that a merchant voluntarily submits through the support form or by email. Support-form submissions are sent to our support inbox and are not used for marketing.

4. Purposes of processing

• Authenticate merchants through Shopify and maintain secure app connections.
• Display and manage supported store operations inside StoreOps.
• Validate and deploy merchant-provided JSON manifests.
• Provide multi-store account and pairing functionality where included in the selected plan.
• Verify plan availability and billing status through Shopify App Pricing.
• Protect the service against abuse, diagnose errors and provide support.

5. Shopify authentication and billing

StoreOps uses Shopify authentication and Shopify App Bridge. StoreOps does not require merchants to create a separate password. Subscription selection, recurring billing, trials, upgrades and downgrades are handled through Shopify App Pricing.

6. Multi-store pairing

Basic and Premium accounts can connect additional stores through a temporary pairing code created in the primary StoreOps workspace. When the code is redeemed, StoreOps identifies the joining store from its authenticated Shopify session; merchants do not manually provide or bind a target store domain. Pairing codes expire automatically after a short period.

7. Storage and retention

StoreOps does not maintain customer profiles and does not persist the customer-identifying fields listed above. Operational order data is retrieved from Shopify as needed for the merchant-facing interface. Store configuration, encrypted credentials and account settings are retained only as needed to provide the service. Temporary pairing information expires automatically. Technical logs are retained only as reasonably necessary for operation, security and troubleshooting.

8. Service providers

StoreOps relies on service providers where necessary to operate the app. This currently includes Shopify for platform authentication, APIs and billing, and Hetzner for hosting infrastructure. These providers process information under their own applicable terms and data-protection arrangements.

9. International data transfers

Depending on Shopify's infrastructure and the merchant's location, Shopify-related processing may involve countries outside the European Economic Area. Such processing is governed by Shopify's applicable privacy and data-transfer arrangements.

10. Merchant and customer requests

Merchants can contact us regarding access, correction, deletion or other privacy requests relating to StoreOps. Customers of a merchant should normally contact that merchant first, because the merchant determines the purposes for which customer information is processed in its store.

11. Data protection rights

Where applicable under data-protection law, individuals may have rights of access, rectification, erasure, restriction, portability and objection, as well as the right to lodge a complaint with a competent supervisory authority.

12. Security

StoreOps uses HTTPS for data in transit and applies technical safeguards for stored app credentials and configuration. Access to merchant APIs is limited to the scopes required by the active StoreOps feature set.

13. Changes to this policy

We may update this Privacy Policy when StoreOps features, legal requirements or service providers change. The current version is published on this page.

14. Contact

Privacy questions can be sent to hallo@salihkurtlar.de.