Privacy Policy
Last updated: September 18, 2026
1. Who we are
Syncory ("we", "us", or "our") is a multi-tenant inventory platform used by merchants to manage catalog and stock data and to synchronize inventory with connected Shopify stores. This policy explains how we handle information when you use Syncory at https://syncory.mamaluma.com or install our Shopify app.
2. Scope
This policy covers merchant operators who sign in to Syncory and Shopify store data accessed through the Syncory Shopify app. It does not cover Shopify's own processing of merchant or customer data, which is governed by Shopify's privacy materials.
3. Information we collect
Account and workspace data
When you sign in, we receive identity information from our authentication provider (Google), such as your name and email address. We also store workspace memberships, roles, and settings you configure in Syncory.
Catalog and inventory data
We store product, variant, pricing, location, and inventory records that you create or import into Syncory, including workbooks and related media you upload for import.
Shopify store data
After you install the Syncory Shopify app and authorize access, we may read and update store data needed for inventory synchronization and catalog import. Depending on the scopes you grant, this can include shop identity, locations, products, variants, SKUs, and inventory quantities. Access tokens are stored encrypted on our servers. We do not request Shopify customer PII scopes for Syncory's core inventory features.
Technical and operational data
We process session cookies, request logs, sync health status, webhook receipts, and diagnostic records needed to operate, secure, and troubleshoot the service. Logs and receipts are redacted to avoid storing secrets or unnecessary personal data.
4. How we use information
- Provide sign-in, workspaces, and role-based access
- Import and manage catalog and inventory in Syncory
- Connect Shopify stores, map locations, and synchronize available quantities
- Maintain multi-store product links and sync status
- Secure the service, prevent abuse, and investigate incidents
- Respond to support and privacy requests
We do not sell personal information. We do not use Shopify store data for advertising.
5. Legal bases (where applicable)
Where data-protection law requires a legal basis, we process information to perform the service you request (contract), to operate and secure the platform (legitimate interests), and to meet legal obligations such as responding to lawful deletion or access requests.
6. Sharing and processors
We share information only as needed to run Syncory:
- Shopify — to authorize the app and sync inventory or catalog data you connect
- Google (sign-in) — for authentication of Syncory users
- Infrastructure providers — hosting, database, object storage, and related operations under our control
We may disclose information if required by law or to protect the security and integrity of the service.
7. Retention and deletion
We retain account, catalog, inventory, and connector data while your workspace uses Syncory. When you disconnect a Shopify store or uninstall the Syncory Shopify app, we stop new sync activity for that store and revoke or deactivate connector credentials as part of normal disconnect handling. You may request deletion of workspace or personal account data by contacting us. We may retain limited records as required for security, audit, backup, or legal compliance, and then delete or anonymize them according to our retention practices.
8. Security
We use HTTPS in transit, tenant isolation controls, encrypted storage of Shopify access tokens, and operational redaction of secrets in logs. No method of transmission or storage is completely secure; please protect your account credentials and device access.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, export, or delete personal information, or to object to certain processing. Merchants can disconnect Shopify stores from Syncory and uninstall the app from Shopify admin. To exercise privacy rights, contact us using the details below. We may need to verify your request before acting on it.
10. Children
Syncory is intended for business use by merchants and their authorized staff. It is not directed to children.
11. Changes
We may update this policy from time to time. The "Last updated" date at the top of this page will change when we do. Continued use of Syncory after an update means you accept the revised policy.
12. Contact
For privacy questions or requests, email majeed.dl@gmail.com. You can also use the support email published on our Shopify App Store listing.