This Privacy Policy explains how Ondokuzon Software ("we", "us", or "our") collects, uses, and protects information in connection with the Bulk Image & Video Upload Shopify application and its integration with Google Drive (the "Service"). By installing or using the Service, you agree to this Privacy Policy.
Scope and Definitions
- Service: The Bulk Image & Video Upload Shopify application and related services.
- Merchant, you: The Shopify store owner or authorized user installing/using the app.
- Personal Data: Any information relating to an identified or identifiable natural person.
- Google User Data: Information accessed through Google APIs (e.g., Google Drive file metadata, OAuth tokens).
- Shopify Store Data: Information accessed through Shopify APIs (e.g., product data).
Data We Collect
- Shopify Store Data: Product information (e.g., product IDs, titles, SKUs, barcodes) to match images with products; basic store identifiers to operate the app.
- Google User Data: OAuth tokens and limited profile data to connect your Google account; Google Drive file metadata (e.g., file IDs and names) for images you authorize us to access. We do not retain image files after transfer.
- Technical and Operational Data: Logs, timestamps, operation identifiers, and aggregate counters (e.g., number of images discovered, matched, or uploaded).
- We Do Not Collect: Persistent copies of your Google Drive images; data for advertising; we do not sell personal data.
Purposes and Legal Bases (GDPR)
- Provide and operate the Service (Art. 6(1)(b) GDPR – contract).
- Secure and maintain the Service, detect/prevent abuse (Art. 6(1)(f) GDPR – legitimate interests).
- Comply with legal obligations (Art. 6(1)(c) GDPR).
- With your consent where required (Art. 6(1)(a) GDPR).
How We Process Google Drive Images
You explicitly authorize the app to access specific Google Drive folders/files containing product images. The Service reads necessary file metadata and temporarily processes image content to upload the images to corresponding Shopify products. Images are not retained after the transfer is complete.
Data Retention
- OAuth tokens: Stored securely and retained while your account is active or until you revoke access or uninstall.
- Logs and metadata: Retained for a limited period necessary to operate the Service and for security/compliance.
- Images: Not retained after transfer; processed only transiently to complete uploads.
Data Sharing and Disclosure
We do not sell personal data. We do not share Google User Data or Shopify Store Data with third parties except service providers (e.g., hosting, monitoring) under confidentiality and data protection commitments, or when required by law, legal process, or to protect rights, property, or safety.
International Transfers
We may process data on servers outside your country. Where applicable, we implement appropriate safeguards (e.g., Standard Contractual Clauses) to protect your data.
Security
We use industry-standard measures to protect data in transit and at rest (e.g., encryption, access controls, least-privilege). OAuth tokens are stored securely and rotated/invalidated according to vendor guidance. We regularly review permissions and limit scopes to the minimum required.
Cookies
We may use strictly necessary cookies and similar technologies to authenticate sessions and operate the Service. We do not use cookies for cross-site advertising.
User Rights
Subject to applicable law (including GDPR and CCPA), you may access, correct, delete, or obtain a copy of your personal data; object to or restrict certain processing; withdraw consent where processing is based on consent; and receive your data in a portable format (where applicable). Under CCPA, you may opt out of “sale” or “sharing” of personal information (we do not sell personal information).
Your Choices and Controls
- Revoke Google Access: Via your Google Account settings and/or within the app’s disconnect feature.
- Uninstall the App: Uninstalling from Shopify stops data flows; we honor Shopify’s data redaction webhooks.
- Data Deletion Request: Contact us to request deletion of logs/operational metadata associated with your account, subject to legal obligations.
Compliance Statements
- Google API Services User Data Policy (Limited Use): Use of Google User Data is limited to providing or improving user-facing features; no transfer to third parties except as necessary to provide the Service or comply with law; no use for advertising; human access only with consent, for security/compliance, or to comply with the law.
- Shopify App Store and API Policies: We handle Shopify Store Data strictly in accordance with Shopify’s policies and merchant agreements, and honor mandatory webhooks for data redaction and uninstallation.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted within the app or on our website with an updated “Last updated” date.
Contact Us
Ondokuzon Software
Türkiye Kızılırmak mah. Dumlupınar Cad., Next Level 3C-1/160 Çankaya, Ankara 06340, TR
Email: dev@ondokuzon.com