Privacy and data processing policy

1. Parties and roles

The merchant remains the controller of personal data processed in their Shopify store. ALLURO TRADE EXPRESS S.R.L., trading as ALLSoft Agency, acts as a processor for the limited processing performed by the ALLSoft OS Shopify Connector.

Company details: ALLURO TRADE EXPRESS S.R.L., VAT ID RO42391478, registered office at Str. Învingătorilor 31-31A, Sector 3, Bucharest, Romania. Privacy contact: info@allsoftagency.ro.

2. Data processed and data minimisation

The connector processes only the data needed for its function:

• the store's myshopify.com domain;
• granted scopes and encrypted OAuth credentials;
• level 1 protected order data needed to calculate commercial reporting, such as dates, currency, order counts, sales totals and refund totals;
• integration health and signed webhook delivery identifiers.

The connector does not request or store customer names, email addresses, phone numbers or postal addresses. It does not store raw order or customer profiles, payment credentials, checkout content or browsing behaviour.

3. Purpose and merchant instructions

Data is processed only to authenticate the store, reconcile read-only Shopify data, calculate aggregate commerce metrics, monitor integration health and present reporting requested by the merchant in ALLSoft OS. Data is not used for advertising, data brokerage, independent profiling or unrelated product development.

By installing and using the connector, the merchant instructs and authorises ALLSoft Agency to perform this limited processing. This policy forms the app-specific privacy and data processing agreement between the merchant and ALLSoft Agency, together with any signed service agreement. If the documents conflict, the signed service agreement prevails.

4. Shopify permissions

The app requests only read-only access to orders. This permission powers the visible 30-day commerce summary and normalized daily reporting. The app cannot create products, change prices, fulfil or refund orders, publish storefront changes or process payments. Shopify access is granted and can be revoked by the merchant through Shopify Admin.

5. Consent, sale of data and automated decisions

The connector does not place customer-facing tracking technology, sell or share personal data for behavioural advertising, or make automated decisions with legal or similarly significant effects. Where a merchant's instructions or applicable law require a consent or opt-out decision, ALLSoft Agency applies that instruction and does not process data for an incompatible purpose.

6. Security

• HTTPS/TLS is required for all browser and API traffic.
• OAuth and refresh credentials are protected at rest with versioned envelope encryption.
• Shopify webhooks are verified by HMAC signature.
• Raw order and customer webhook payloads are not logged or stored.
• Production access is restricted to authorised ALLSoft Agency personnel and technical activity is auditable.

7. Retention and deletion

Individual order payloads are processed transiently and are not retained. Daily aggregate commerce facts are kept while the connection is active so the merchant can compare reporting periods. OAuth sessions are deleted when the app is uninstalled. Shopify's mandatory shop-redaction webhook deletes the Shopify connection and linked connector data. Verified deletion requests are also actioned without undue delay.

Operational database backups are retained for 14 days and then rotated. Deleted records expire from those backups through that rotation cycle and are not restored except for disaster recovery.

8. Subprocessors and transfers

The connector is hosted on OVHcloud infrastructure in the European Union. Shopify supplies the source platform and API. ALLSoft Agency does not disclose app data to unrelated third parties. If a service requires an international transfer, applicable contractual and legal safeguards are used.

9. Data requests and compliance webhooks

The app implements Shopify's mandatory customer data request, customer redaction and shop redaction webhooks. Because the app does not retain customer profiles or direct identifiers, there is no customer profile dataset to export. Merchants can submit privacy, access or deletion requests to info@allsoftagency.ro.

10. Changes

Material changes will be published on this page with a new effective date. Continued use after a change means the merchant accepts the updated policy; changes that require a new Shopify permission will be presented through Shopify's approval flow.