Privacy Policy

Last updated: September 11, 2025

Synergy Tech Solutions (“we”, “us”, “our”) provides SyncSuite for Shopify, including SheetSync, SupplySync, and SalesSync (collectively, the “Services”). This policy explains how we handle personal data and merchant data, including data accessed via Google and Shopify.

What we collect

• Account & authentication data: the connected Google account email, Shopify shop domain, and authentication tokens necessary to operate the Services. Tokens are encrypted at rest.
• Product & catalog data: product titles, variants, images, prices, costs, tags, inventory, and related metadata as required to sync with Google Sheets and execute campaigns.
• Operational metadata: file IDs, spreadsheet IDs, timestamps, job status, and minimal logs required for troubleshooting and support.

Google user data

With your consent, we request the following Google OAuth scopes to power core features:

• userinfo.email — identify the connected Google account and share the spreadsheet with that email.
• spreadsheets — create/read/write your product spreadsheet (values, formatting, helper columns).
• drive.file — create and manage only the files you create through, or explicitly select for use with, our app (e.g., your product spreadsheet and its container-bound script).
• script.projects and script.deployments — create/update and deploy a container-bound Apps Script in the spreadsheet to mark edited rows (e.g., updated = yes) so your intended changes can be processed in Shopify.

We do not sell Google user data. We do not use Google data for advertising. We do not use Google user data to train AI/ML models. We only store the minimum identifiers (like file IDs) required to connect to your resources, and you may revoke access at any time in your Google Account settings.

Data Sharing & Disclosure

We share or disclose Google user data only as necessary to operate the Services:

1. Google as a service provider: We send requests to Google APIs (Drive, Sheets, Apps Script) strictly to create, access, and manage the spreadsheet you create or explicitly select for use with our app.
2. Infrastructure subprocessors: Cloud hosting, email delivery, logging/monitoring, and security providers that process data on our behalf under confidentiality and data-processing terms. We share only what is necessary to provide the Services.
3. Legal & safety: Where required by law or to protect rights, safety, or prevent abuse.

We do not disclose Google account credentials to Shopify. Shopify product updates are executed via the Shopify Admin API based on spreadsheet content you control.

How we use data

• To create, maintain, and sync your product spreadsheet with Shopify.
• To detect supplier CSV changes, propose updates, and apply approved updates to Shopify.
• To schedule and apply promotions, then revert prices when campaigns end.
• To provide support, diagnostics, and security monitoring.

Data retention & deletion

We retain data only as long as needed to operate the Services or as required by law. You may disconnect Google or Shopify at any time; upon disconnection, we cease access and delete associated tokens. You may also request deletion of data we store by contacting support@supplysync.au.

Security

We apply industry-standard security practices, including encryption of tokens at rest, scoped access by least privilege, and regular access reviews. Nevertheless, no system can be guaranteed 100% secure.

Subprocessors

We rely on cloud infrastructure and APIs (e.g., Google Cloud APIs, Shopify Admin API, hosting providers, email services) as necessary to deliver the Services.

Your choices

• Revoke Google access in your Google Account at any time.
• Uninstall the Shopify app from your store at any time.
• Email us to request deletion of stored data identifiers.

Contact

Questions or requests? Contact support@supplysync.au.