Privacy Policy

1. Who we are

Price Bulk Editor ("the app", "we", "us") is a Shopify embedded application operated by Expert Ecommerce, a French entity. Our registered address and contact are available on request: support@expert-ecom.com.

2. Data we process

When you install the app on your Shopify store, we receive and process:

• Store metadata: shop domain, primary currency, store timezone, plan tier, installation/uninstallation timestamps.
• Product and variant data: product IDs, variant IDs, prices, compare-at prices, tags, collections, vendors, product types, SKUs, inventory quantities, cost-per-item. We read these to build filters and to snapshot prior state before any change.
• User identity: the Shopify staff account email associated with each action you perform inside the app.
• Billing data: subscription tier and Shopify charge IDs (we never see or store card numbers — Shopify handles all payment).

We do not access: customer data (names, addresses, emails), order data, cart data, customer payment information, or storefront analytics.

3. Why we process it

• To run the service. We need product and variant data to apply your pricing rules and to write rollback snapshots.
• Audit and compliance. We retain a log of price changes for the retention window of your tier so finance and auditors can reconstruct history.
• Billing. We track your tier and usage against your monthly SKU-edit limit.
• Support. When you email support, we may consult your audit log to diagnose the issue.

4. Where the data lives

All data is hosted on Infomaniak servers in Switzerland. Switzerland is recognized by the European Commission as providing an adequate level of data protection (GDPR adequacy decision), so the legal regime is equivalent to EU residency for GDPR purposes. We do not use US-based cloud providers for primary storage. Backups are encrypted at rest and stored in the same region.

5. Sub-processors

We use a small number of sub-processors, each bound by a Data Processing Agreement:

• Infomaniak (Switzerland) — application hosting and database
• Postmark (Sendmark, USA via DPF / SCCs) — transactional email (account notifications, alerts)
• Crisp (France) — in-app chat support (only loaded if you open chat)
• Plausible (EU) — privacy-respecting analytics on the marketing site (no cookies, no personal data)
• Shopify (Canada/USA) — platform integration; data exchange governed by the Shopify Partner Program

6. Retention

Audit log retention follows your tier: 30 days on Free, 90 days on Starter, 2 years on Growth, 5 years on Scale. Product/variant snapshots are retained for the lifetime of the related task plus 30 days, then purged. On uninstall, we retain your data for 48 hours (for accidental-uninstall recovery), then schedule full deletion within 90 days per Shopify's mandatory GDPR webhooks (shop/redact, customers/redact).

7. Your rights under GDPR

If you are an EU/EEA/UK data subject, you have the right to:

• Access the data we hold about your store
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability (we'll export your audit log on request)
• Lodge a complaint with your supervisory authority (in France: CNIL)

Email support@expert-ecom.com for any of the above. We respond within 30 days.

8. Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production data is restricted to two named engineers with audited SSH sessions. We run a vulnerability scan weekly and apply security patches within 72 hours of disclosure. We do not log Shopify access tokens; they are stored encrypted with per-shop keys.

9. Cookies

The marketing site uses no tracking cookies (Plausible analytics is cookieless). The embedded admin app uses a single Shopify session cookie required for OAuth and a CSRF token cookie. See our Cookie Policy for full details.

10. Changes to this policy

We post material changes on this page and notify active stores by email at least 30 days before they take effect.

11. Contact

Data controller: Expert Ecommerce, France.
Privacy and DPO contact: support@expert-ecom.com.