Privacy Policy

Account Information

When you install and use our app, we collect:

• Your Shopify store name and domain
• Shopify access tokens (required for API access)
• Subscription and billing information
• Usage statistics and job history

Google User Data

If you choose to connect Google Drive, CFO Product Image Sync may access or store the following Google user data:

• Your Google account email address and basic profile information, so the app can show which Google account is connected.
• OAuth access and refresh tokens, so the app can perform the Drive actions you authorize.
• Google Drive file and folder IDs, file names, file types, and image content for files or folders you select, open, create, or authorize through the app.
• Google Drive folders created by the app or selected by you for image import, export, or scheduled sync.

Third-Party Service Credentials

If you choose to connect external services:

• Google Drive: We store OAuth tokens (access and refresh tokens) to access only the Google Drive files and folders authorized for app functionality. These tokens are encrypted and stored securely.
• FTP Servers: We store FTP connection credentials (host, port, username, password) that you provide. These are encrypted and used only for file transfers.

Product and Image Data

We temporarily process product information and images during upload and export operations. This data is:

• Processed in real-time and not permanently stored
• Used only for the specific operation you request
• Not shared with third parties except as necessary for the service

We use the information we collect to:

• Provide and maintain the Bulk Image Upload service
• Process image uploads and exports as requested
• Read Google Drive image files you authorize and match them to Shopify products by SKU, barcode, product title, or filename
• Export Shopify product images to Google Drive folders you select or create through the app
• Run scheduled sync jobs for Google Drive folders you have authorized
• Manage your subscription and billing
• Monitor service usage and enforce package limits
• Provide customer support and respond to inquiries
• Improve our service and develop new features
• Send important service updates and notifications

We take data security seriously and implement industry-standard measures to protect your information:

• Encryption: All sensitive data, including OAuth tokens and FTP credentials, are encrypted at rest and in transit
• Access Control: Access to your data is restricted to authorized personnel only
• Secure Storage: Data is stored in secure, encrypted databases with regular backups
• API Security: All API communications use HTTPS and secure authentication
• Token Management: OAuth tokens are automatically refreshed and can be revoked at any time

Google Drive

When you connect Google Drive, we use Google's OAuth 2.0 API. Your Google account data is subject to Google's Privacy Policy. We only access:

• Files and folders you explicitly select for upload/export
• Basic file metadata (name, size, type) for matching purposes

You can disconnect Google Drive at any time, which will revoke our access to your account.

Shopify

Our app integrates with Shopify's API to access your store data. This integration is governed by Shopify's Partner Program Agreement and API Terms of Service. We only access:

• Product information (titles, SKUs, barcodes) for image matching
• Product images for upload and export operations
• Store settings necessary for app functionality

We retain your information for as long as necessary to provide our services:

• Account Data: Retained while your account is active and for 30 days after account closure
• Job History: Retained for 90 days for troubleshooting and support purposes
• OAuth Tokens: Retained until you disconnect the service or revoke access
• Google Drive File and Folder IDs: Retained while needed for configured import, export, or scheduled sync jobs, and deleted when the configuration or app account is removed
• FTP Credentials: Retained until you remove the FTP configuration
• Billing Information: Retained as required by law for accounting and tax purposes

You have the right to:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal requirements)
• Disconnect Services: Disconnect Google Drive or remove FTP settings at any time
• Uninstall: Uninstall the app, which will trigger data deletion procedures
• Opt-Out: Opt out of non-essential communications

To exercise these rights, please contact our support team.