This policy explains what information Shopfleet (“we”, “us”) collects when you use our website and the Shopfleet app, how we use it, and the choices you have. If you have questions, email privacy@getshopfleet.com.
1. Information we collect
- Account information — your name, email address, password (stored hashed), and two-factor settings.
- Workspace information — workspace name, team members you invite, their roles and store access.
- Store data from Shopify — when you connect a store, we receive an access token and sync product, variant, price, inventory and collection data needed to show and edit your catalog. We request only the permissions the app needs (products, inventory and locations).
- Activity data — a record of changes made through Shopfleet and changes reported by Shopify webhooks, including the user, store, item and before/after values, plus IP address and browser for security.
- Messages you send us — what you write in the contact form or emails to support.
Shopfleet does not need or store your customers' personal data. If Shopify sends customer-data requests or redaction webhooks, we handle them as Shopify requires.
2. How we use information
- To provide the service: show your catalog, run the rules and edits you ask for, and keep your activity log.
- To keep accounts secure: sign-in, two-factor authentication, permission checks and abuse prevention.
- To communicate with you: replies to your messages, account emails such as invitations and password resets, and important service notices.
- To bill your subscription through Shopify.
We do not sell your data, and we do not use your store data for advertising.
3. How we protect it
Store access tokens are encrypted at rest. Shopify webhooks are verified with HMAC signatures. Connections use HTTPS, sessions are encrypted, and access within a workspace is limited by role and per-store permissions. The activity log is append-only.
4. Sharing
We share information only with service providers that help us run Shopfleet (for example hosting and email delivery), under agreements that protect it, and with Shopify as needed to provide the app and billing. We may disclose information if the law requires it.
5. Retention
We keep account and workspace data while your account is active. Activity history is kept for the period included in your plan. Price snapshots used for reverting rules are kept until the rule is reverted, or 90 days after it ends. When you delete your workspace or uninstall the app, we delete the related store data within 30 days, except where we must keep records by law.
6. Your rights
You can access and update your profile in the app, export your activity log to CSV, and ask us to delete your account. Depending on where you live, you may have further rights to access, correct, delete or port your data, or to object to processing. Email privacy@getshopfleet.com and we'll respond within 30 days.
7. Cookies
The app uses essential cookies for sign-in sessions and security. This website stores your light/dark theme choice in your browser. We don't use advertising cookies.
8. Changes
If we change this policy in a meaningful way, we'll update the date above and let account owners know by email or in the app.