1. Overview & Relationship with Shopify Merchants
Restorely ("we", "our", or "us") provides automated backup, recovery, catalog version history, theme Liquid rollback, and emergency circuit breaker safety software for merchants operating on the Shopify e-commerce platform.
Under data protection legislation (including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act / CPRA):
- The Merchant is the Data Controller: You control the customer and catalog data collected by your store, determining the legal basis and purposes of processing.
- Restorely is the Data Processor: We process store data and customer records strictly on your behalf and according to your explicit configuration to provide backup, monitoring, and recovery services.
Merchants may review and execute our standard Data Processing Addendum (DPA) incorporating Standard Contractual Clauses (SCCs) directly within the Restorely Trust & Security Center in your app dashboard.
2. Information We Collect
When you install Restorely, we automatically access certain store data authorized through Shopify's OAuth permission screen:
| Category | Data Elements | Why It Is Collected |
|---|---|---|
| Store Identity (CCPA Identifiers) | Shop domain, Shop ID, store name, currency, timezone, primary contact email. | Store identification, plan billing authorization, and security notifications. |
| Catalog & Content (Commercial Info) | Products, variants, prices, inventory levels, collections, pages, blogs, and Metafields. | Creating automated restore points, detecting price crashes, and executing 1-click rollbacks. |
| Theme Code & Settings | Liquid template code, JSON config files, theme assets, and draft theme archives. | Restoring broken, corrupted, or deleted Liquid code and theme configurations. |
| Orders & Customer Vault (Protected Customer Data) | Order ID, total amount, customer name, shipping address, and email (encrypted/hashed at rest). | Disaster recovery index for accidental order or customer data loss (Growth+ tiers). |
| Marketing Configurations | Klaviyo & Mailchimp list IDs, audience counts, flow templates (optional). | Marketing automation rollback and audience retention. |
| Audit Logs & Staff Activity | Authenticated staff email, action timestamps, IP logs of backup operations. | Multi-user security audit trails and tracking authorization changes. |
3. Shopify API Access Scopes & Purpose
In strict compliance with Shopify App Store Review requirements and data minimization principles, every requested OAuth scope serves a necessary functional purpose:
| Shopify Scope | Access Type | Functional Necessity |
|---|---|---|
read_products, write_products | Read / Write | Backing up product catalogs and restoring previous version snapshots during rollback. |
read_themes, write_themes | Read / Write | Backing up Liquid templates and rolling back broken or edited theme files. |
read_content, write_content | Read / Write | Backing up and restoring store Pages, Blog posts, and articles. |
read_online_store_navigation, write_online_store_navigation | Read / Write | Backing up store navigation menus and link lists. |
read_inventory | Read Only | Snapshotting inventory levels across locations to detect stock discrepancies. |
read_orders, write_orders | Read / Write | Maintaining the encrypted historical Orders Vault and order backups; writing is used only when a merchant restores orders from their own backup or import. |
read_customers, write_customers | Read / Write | Maintaining the encrypted historical Customer Archive for store continuity, and customer backups; writing is used only when a merchant restores or imports customers from their own backup or file. |
read_customers and read_orders) is processed solely to build encrypted point-in-time disaster-recovery snapshots configured by the merchant. We do NOT sell, broker, monetize, share, profile, or use Protected Customer Data for advertising, tracking, or cross-merchant intelligence. All customer records are encrypted at rest (AES-256) and immediately scrubbed upon receiving Shopify's mandatory GDPR webhooks.4. How We Use and Process Data
We process your data strictly to deliver the agreed backup and store protection services under the following GDPR Lawful Bases (Article 6):
- Performance of a Contract (Art. 6(1)(b)): Generating scheduled point-in-time recovery archives, executing merchant-requested rollbacks, and backing up theme Liquid assets.
- Legitimate Interests (Art. 6(1)(f)): Monitoring catalog health via emergency circuit breakers to auto-draft or restore products during accidental bulk price drops or unauthorized edits.
- Merchant-Directed Cloud Sync: Exporting encrypted backups to the merchant's connected Google Drive or Dropbox storage upon explicit OAuth authorization.
- Monitoring & Alerts: Dispatching downtime and tracking tag health alerts via Email or Slack webhooks configured by the store administrator.
- Legal Compliance (Art. 6(1)(c)): Fulfilling mandatory Shopify GDPR data request and redaction protocols.
5. GDPR & CCPA Data Rights
We respect the privacy rights of merchants and end-customers under global data privacy laws:
Right to Access
Request an export of all personal data and order archives associated with your store or customers.
Right to Erasure
Request permanent redaction and deletion of customer personal identifiable information (PII).
Right to Rectification
Update or correct stored merchant notification emails and integration credentials anytime.
Right to Restrict
Pause automatic backup routines or disconnect third-party cloud synchronization with 1 click.
California Consumer Privacy Act (CCPA / CPRA) Statutory Notice
Notice of No Sale or Sharing: In the preceding twelve (12) months, Restorely has NOT sold and has NOT shared any consumer personal information for cross-context behavioral advertising.
Non-Discrimination: We will not discriminate against any merchant or customer for exercising any applicable CCPA/CPRA or GDPR privacy rights.
Statutory Response SLA: All verified data access, deletion, or portability requests submitted via email or our in-app Trust Center will be acknowledged within 24–48 business hours and fully fulfilled free of charge within 30 days (GDPR) or 45 days (CCPA).
6. Mandatory Shopify GDPR Webhooks
In full alignment with Shopify Partner Requirements, Restorely implements and responds to all mandatory privacy webhooks with immediate HTTP 200 responses verified via Shopify's SHA-256 HMAC cryptographic signature:
customers/data_requestWhen a customer requests their data from your store, Shopify dispatches this webhook. Restorely compiles any archived records or order logs associated with that customer and returns them securely.
customers/redactWhen a customer exercises their Right to be Forgotten, Restorely immediately scrubs customer PII from the OrderArchive and CustomerArchive tables, replacing names and emails with REDACTED_GDPR while keeping financial totals for tax integrity.
shop/redact48 hours after an app uninstallation, Shopify triggers this webhook. Restorely permanently and automatically purges all store records, product snapshots, restore points, audit logs, and sessions from the database.
7. Data Retention & Automatic Purge Schedules
Backup archives are retained according to the active plan limits:
- Starter Plan: Change history and restore points are retained for 90 days.
- Growth Plan: Change history and restore points are retained for 180 days (6 months).
- Business & Enterprise Plans: Change history is retained for 365 days (1 full year).
- Post-Uninstallation Purge (The 48-Hour Rule): When the app is removed, all active tracking stops instantly. Within 48 hours, all database rows are permanently deleted via the
shop/redactprotocol. If an uninstalled store is re-added within 48 hours, settings may be resumed; after 48 hours, all historical snapshots are permanently and irreversibly wiped.
8. Data Security & Encryption Standards
We employ industry-leading technical and organizational security controls to protect merchant information:
9. Third-Party Sub-Processors & International Transfers
We work with industry-standard cloud infrastructure providers who adhere to GDPR, ISO 27001, and SOC-2 standards:
| Sub-Processor | Role / Service | Location |
|---|---|---|
| Shopify Inc. | App platform, billing, and OAuth API gateway | Canada / Global |
| Cloud Infrastructure / Hostinger | Secure VPS hosting and Prisma database cluster | United States / Europe |
| Google Cloud Platform | Optional merchant-configured Google Drive cloud sync | United States / Global |
| Dropbox Inc. | Optional merchant-configured Dropbox cloud sync | United States / Global |
International Data Transfers (GDPR Chapter V)
Where store or customer data originating in the European Economic Area (EEA), the United Kingdom, or Switzerland is transferred internationally, Restorely ensures an adequate level of data protection by relying on:
- Adequacy Decisions: European Commission adequacy decisions (such as Canada for Shopify Inc. platform operations under Article 45 GDPR).
- Standard Contractual Clauses (SCCs): Approved by the European Commission pursuant to Implementing Decision (EU) 2021/914 for secure transfers to international cloud hosting and storage providers.
11. Children's Privacy (COPPA Compliance)
Restorely is an e-commerce business application designed exclusively for commercial Shopify merchants. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 16.
12. Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect technical enhancements, legal requirements, or Shopify platform updates. When material changes occur, we will notify merchants by updating the "Last Updated" date at the top of this policy and posting an announcement within the Restorely app dashboard at least 30 days prior to implementation.
13. Contact & Legal Entity Information
If you have any questions, inquiries, or data access requests regarding this Privacy Policy or your store's data, please contact our support and compliance team: