Privacy Policy

DataNotice helps Shopify merchants manage information and readiness for connected products and publish product notices. This policy describes data used by the service.

Operator and privacy contact

DataNotice is operated by Xavier Vallès, an individual based in Spain, who is the controller for personal information used to operate the service and handle correspondence. Contact: support@vallbyte.com. No data protection officer has been appointed.

Information used and why

• Store information: the Shopify shop domain, a store name or domain label, internal identifiers and creation timestamps identify the installation and keep each store's records separate.
• Product information: Shopify product identifiers, titles and handles identify products when syncing, editing and importing. Connected-product classifications, notice fields and update timestamps support readiness checks and publication.
• Installation credentials: encrypted Shopify access and refresh tokens, their expiry times, granted permissions and installation lifecycle metadata allow authorized server-side calls to Shopify. Access tokens are not returned to the browser.
• Subscription information: DataNotice queries Shopify for the active plan and trial information to display subscription state and enforce limits. It does not collect payment card details.
• Import files: XLSX and CSV contents are processed for validation and preview. The import flow does not save the uploaded file as a file; confirmed product changes are saved. A protected confirmation snapshot is returned to the browser and expires after 15 minutes.
• Operational and support information: request identifiers, error information and relevant internal product identifiers help diagnose failures. If you contact support, your email and the information you choose to send are used to handle your request. Do not send passwords, access tokens or unnecessary personal data.

Customer data and connected-device data

DataNotice does not request Shopify customer or order records through its product integration. It describes the data practices of products; it does not collect the actual readings or usage data generated by connected devices. Do not place customer personal data or confidential information in notice fields.

Shopify may include customer information in mandatory privacy notifications. The app validates these notifications but does not persist their customer payloads or create customer records.

Publication and service providers

Complete notices are copied to Shopify product metafields for the theme block to display publicly. Treat notice content as public information. When a notice is no longer complete or the product is marked not connected, DataNotice attempts to remove the public copy; check any reported publication failure and retry.

Shopify provides the app platform, product APIs, subscription information and storefront display. Hetzner Cloud provides hosting for DataNotice in Germany, within the EEA. Support and email infrastructure providers process correspondence as necessary to deliver and respond to messages. These providers process information needed for their respective services. The storefront block reads the notice from Shopify and does not request it from the DataNotice backend when a shopper views the product.

Retention, uninstall and deletion

Store, product and notice records remain in the application database while the installation is used. Receiving Shopify's uninstall notification disables the installation and clears its saved access and refresh credentials. Uninstall notification handling does not immediately delete the product and notice records.

When Shopify's shop deletion notification (shop/redact) is successfully processed, DataNotice deletes that store and its related products, notices and installation records from its application database. Customer access and deletion notifications are acknowledged after validation; DataNotice has no stored customer dataset to export or erase.

Deletion from the application database is separate from the lifecycle of operational logs, backups, support correspondence and copies held by Shopify. Contact support about retention or a deletion request. Removing DataNotice does not itself erase content you have copied elsewhere.

Cookies and analytics

DataNotice does not add its own analytics or tracking cookies to these public pages, the embedded app or its storefront block. Shopify and the merchant storefront may use their own cookies and services under their respective policies.

Security

The service uses HTTPS, authenticated admin requests, store-scoped access and encrypted stored Shopify credentials. Shopify webhook signatures are checked before processing. These safeguards reduce risk but cannot guarantee absolute security.

Your requests and contact

To ask about your information or request access, correction or deletion, email support@vallbyte.com. Include your shop domain and a description of the request, without credentials. We may need to verify that you are authorized to make the request. Rights, including objection, restriction, portability and complaints to a supervisory authority, depend on applicable law and the circumstances.

This policy may be updated to reflect changes to the service or its data practices. Review the date below and contact support with questions.