Privacy policy

Information SheetOps processes

SheetOps processes the installed Shopify store domain, authorization records, order identifiers and fields selected by the merchant, spreadsheet identifiers, synchronization settings, usage records, and security and operational logs needed to provide the service. Customer-information columns stay switched off unless the merchant deliberately enables them.

Google account and spreadsheet access

SheetOps requests Google's limited drive.filepermission. It can create spreadsheets and work with files the merchant explicitly creates, selects, or shares with SheetOps. It cannot browse the merchant's entire Google Drive. Google access credentials are encrypted and isolated by Shopify store.

How information is used

• Keep merchant-selected Google Sheets synchronized with Shopify.
• Apply saved column and order-selection settings.
• Show synchronization history, diagnostics, and account usage.
• Protect accounts, prevent abuse, and respond to support requests.
• Meet legal obligations and Shopify platform requirements.

Storage and data minimization

SheetOps does not intentionally keep raw Shopify webhook payloads, full spreadsheet contents, or ordinary Google access tokens. It stores configuration and resource identifiers, encrypted refresh authorization, stable row bindings, synchronization status, and sanitized audit metadata. Selected Shopify values are fetched when needed and written to the merchant's spreadsheet.

Sharing and service providers

Information is shared only with Shopify, Google, infrastructure providers needed to operate SheetOps, or authorities when legally required. Zunavro does not sell merchant or shopper information and does not use it to build advertising profiles for unrelated businesses.

Retention and deletion

Active configuration and authorization are retained while needed to provide the service. Operational records are retained only for bounded security, support, billing, and recovery periods. Disconnecting Google removes SheetOps' stored authorization without deleting the merchant's spreadsheets. Uninstall and verified Shopify privacy requests trigger tenant-data cleanup. See the data deletion instructions.

Security and international processing

SheetOps uses HTTPS, tenant isolation, encrypted credentials, least-privilege access, verified Shopify webhooks, and access-controlled production systems. Infrastructure providers may process information outside the merchant's country subject to appropriate contractual and technical safeguards.

Merchant and data-subject choices

Merchants can review their settings, disconnect Google, uninstall the app, or request access, correction, or deletion. Requests are verified against the relevant Shopify store before information is disclosed or removed.

Contact

Privacy questions and verified requests can be sent to support@zunavro.com. Include the permanent myshopify.com domain, but never send passwords, OAuth codes, access tokens, or payment details.