Privacy Policy

01Information we collect & store access

StoreCrafty (“we”, “our”, or “us”) provides automated store backup, snapshot, and cross-store asset migration tools for Shopify merchants. When you install StoreCrafty on your Shopify store, we access data strictly via official Shopify Admin GraphQL APIs, including products, options, variants, manual & smart collections, pages, blogs, articles, navigation menus, and custom metaobjects.

02Data encryption & storage security

All Shopify access tokens are encrypted at rest using bank-grade AES-256-GCM encryption. Snapshot payloads stored in cloud storage are secured behind signed URLs with strict time-limited access control. We never share or sell merchant catalog data to third parties.

03GDPR compliance & mandatory webhooks

StoreCrafty fully complies with the General Data Protection Regulation (GDPR). We respond automatically to all mandatory Shopify compliance webhooks:

• CUSTOMERS_DATA_REQUEST: compiled and delivered within 30 days of merchant request.
• CUSTOMERS_REDACT: customer personal data is permanently purged or anonymized upon request.
• SHOP_REDACT: permanently deletes all store data, access tokens, and backup files 48 hours after app uninstallation.

04Cookies & web analytics

We use essential session cookies necessary for merchant authentication within the Shopify Admin interface. We do not use intrusive tracking cookies or sell visitor behavior to ad networks.

05Merchant support & data privacy contact

If you have questions regarding this Privacy Policy or wish to exercise data privacy rights, please contact our dedicated backup engineering support team at support@storecrafty.com.