Privacy Policy

• SyncAir reads products, orders, customers and metafields from your Shopify store and copies them to the Airtable base you connect.
• To do that, we store copies of those records, along with your Airtable connection, settings and sync history.
• For your customers’ personal information, you are the controller and Invizo processes it on your instructions.
• We don’t sell personal information or use it for advertising.

To get a copy of your data, or to have it corrected or deleted, email privacy@invizo.io.

SyncAir is a product of Invizo. In this policy, “we”, “us” and “our” mean Invizo, and “you” means the merchant who installs and uses SyncAir.

This policy explains how we collect, use, share and protect information when you install SyncAir on your Shopify store, use the app and its dashboard, or contact us. It also covers information about your store’s customers that SyncAir processes for you.

It does not cover Shopify or any other service you connect to SyncAir; those services have their own privacy policies. Your use of SyncAir is also subject to our Terms of Service.

When you install SyncAir, Shopify asks you to approve the access it needs to your store. SyncAir uses that access as follows:

read_products

Read products, variants and product metafields so SyncAir can copy them to Airtable.

read_orders

Read orders and order metafields so SyncAir can copy them to Airtable. Shopify gives SyncAir access to orders from the last 60 days.

read_customers

Read customers and customer metafields so SyncAir can copy them to Airtable.

write_products

Requested for a planned Airtable to Shopify product sync. SyncAir doesn’t currently change your products.

write_orders

Requested, but not currently used. SyncAir doesn’t change your orders.

You can withdraw this access at any time by uninstalling SyncAir from your Shopify admin.

The information we collect depends on the features you use. It comes from your Shopify store through the Shopify API, from details you enter in SyncAir, and from messages you send us.

Store details

Your shop domain, store name, contact email, Shopify plan, country and time zone, which Shopify shares when you install the app, plus your SyncAir plan and settings.

Your IP address

The IP address you connect from when you open SyncAir or sign in to it.

Shopify access token

The token Shopify issues so SyncAir can read your store’s data. We delete it when you uninstall the app.

Airtable connection

The access token Airtable issues when you connect your account, and the ID of the base SyncAir syncs to.

Products

Titles, descriptions, handles, vendors, product types, tags, status, SEO fields, images, and variants with their SKUs, barcodes, prices and stock levels.

Orders

Order numbers and dates, totals and currency, payment and fulfillment status, tags and notes, and the customer’s name and email address. For orders copied from the Data Migration page, also the shipping address, phone number and up to five line items.

Customers

Names, email addresses, phone numbers, addresses, order counts, total spent, tags and whether they accept marketing.

Metafields

The namespace, key, value and type of your product, customer and order metafields, with the product, the customer’s name and email address, or the order number they belong to. SyncAir copies them when you install the app.

Sync settings

Your Airtable table names and IDs, the sync direction and any field mappings.

Sync activity

Each sync run’s resource, record count, duration, status and error messages, and the number of records synced each month.

Support conversations

Messages you send us by email or through the in-app chat, and anything you include in them.

We use the information we collect to:

• Copy the products, orders, customers and metafields in your Shopify store to the Airtable base you connect, including new records as they’re created.
• Create tables in your Airtable base and match your store’s fields to your tables’ fields.
• Show your sync history in the app.
• Count synced records against your plan’s monthly limits, and manage your plan and billing through Shopify.
• Answer your support requests.
• Keep a record of the stores that install and uninstall SyncAir, including the IP address used, so we can support merchants and run our business.
• Keep SyncAir secure and working, for example by verifying requests from Shopify and investigating sync errors.

We don’t sell personal information or use it for advertising.

If you are in the European Economic Area (EEA) or the United Kingdom, data protection law requires a legal basis for each way we use personal information. We rely on the following bases:

Contract

To provide SyncAir under our Terms of Service, including copying your store’s data to Airtable, showing sync history and billing through Shopify.

Legitimate interests

To keep SyncAir secure and reliable, answer support requests and keep records of the stores that use our apps. We rely on these interests only where your rights don’t override them.

Legal obligation

To keep the records that tax and accounting law require, and to respond to lawful requests from public authorities.

For your customers’ information, you decide the legal basis, as explained under Controller and processor roles.

When SyncAir processes personal information about your store’s customers, you are the controller of that information and Invizo is your processor. We process it only to provide SyncAir, on your instructions.

For information about you as a merchant, such as your store details and the messages you send us, Invizo is the controller.

SyncAir sends the records it syncs to the Airtable base you connect: products with their handle, title, description, vendor, type, category, tags, status, SKU, price, compare-at price and image link; orders with the order number, date, customer name and email address, total, currency, payment and fulfillment status, tags and note; customers with their names, email address, phone number, addresses, order count, total spent, tags and marketing consent; and metafields with the product, customer or order they belong to.

With real-time sync, SyncAir sends new products, orders and customers as they’re created in Shopify, whichever data you chose to copy from the Data Migration page.

It also reads your list of bases, your tables and their fields, and existing product records, to create tables, match fields and update the right rows.

Once data is in your Airtable base, it is under your control, and Airtable’s terms and privacy policy apply. Deleting data in Shopify or SyncAir doesn’t reliably delete it from Airtable, so delete it there too when you need to.

We share personal information only with the sub-processors listed below, who help us run SyncAir, and with services you connect to SyncAir on your instructions. Those services’ own terms and privacy policies apply to them.

We may also disclose information when the law requires it, to protect the rights, property or safety of Invizo, our merchants or others, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to your information.

SyncAir’s servers are in Germany. Invizo is based in Bangladesh, and the team that runs and supports SyncAir may access data from there. Your information may therefore be processed in countries whose data protection laws differ from those where you live.

Our sub-processors and their locations are listed under Sharing and sub-processors.

We keep your store’s data while SyncAir is installed: the copies of your products, orders, customers and metafields that SyncAir syncs, plus your Airtable connection, settings and sync history. Our server logs can also contain details from your store, such as customers’ names and email addresses. We keep basic records of your account, such as your store name, contact email, plan and install and uninstall dates, for as long as we need them for accounting, tax and legal purposes.

For what happens when you remove the app, see Deletion when you uninstall.

When you uninstall SyncAir, syncing stops and we delete the access token Shopify gave us. The rest of your store’s data, including the copies of your products, orders, customers and metafields, your Airtable connection, settings and sync history, stays stored until you ask us to delete it. We delete it from our database within 30 days of your request. Records already in your Airtable base stay there until you delete them.

To ask us to delete your information, email privacy@invizo.io.

We protect the information SyncAir handles with these measures:

• Every webhook from Shopify is verified with Shopify’s signature before we act on it.
• You connect Airtable through Airtable’s own sign-in, so SyncAir never sees your Airtable password.
• Traffic between your browser, Shopify, SyncAir and Airtable is encrypted with HTTPS.
• We never write your Shopify or Airtable access tokens to our logs.

No way of storing or sending data is completely secure, so we can’t guarantee absolute security. If a security incident affects your data, we will tell you without undue delay and notify the authorities where the law requires.

If you think your account or data has been compromised, email privacy@invizo.io.

While you connect Airtable, SyncAir sets one signed cookie that only our server can read. It holds the details needed to finish Airtable’s sign-in securely and expires after 15 minutes.

SyncAir doesn’t use analytics, advertising cookies or tracking pixels.

The app runs inside your Shopify admin, which uses Shopify’s own cookies. Shopify’s privacy policy explains them.

The in-app support chat is provided by Crisp, which stores an identifier in your browser so your conversation carries over between pages. Crisp’s privacy policy explains how it handles this.

Depending on where you live and the laws that apply, you may have the following rights over your personal information.

European Economic Area and United Kingdom

If you are in the EEA or the UK, the GDPR and the UK GDPR give you the right to:

• Access the personal information we hold about you.
• Have inaccurate or incomplete information corrected (rectification).
• Ask us to erase your information (erasure).
• Ask us to restrict how we process your information.
• Object to processing based on our legitimate interests.
• Receive the information you gave us in a structured, machine-readable format, or have it sent to another provider (portability).
• Withdraw your consent at any time, where we rely on consent.
• Complain to a data protection supervisory authority, such as the one where you live or work.

California

If you are a California resident, the CCPA, as amended by the CPRA, gives you the right to:

• Know what personal information we collect, use and disclose, and get a copy of it.
• Delete personal information we have collected from you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information.
• Not be discriminated against for exercising these rights.

How to exercise your rights

To make a request, email privacy@invizo.io. We reply within one month. Before we act on a request, we may ask you to confirm it comes from you, for example by writing from your store’s contact email address.

If you shop at a store that uses SyncAir

Please contact that store first. Stores can pass access and erasure requests on to us.

SyncAir is a tool for businesses and isn’t meant for children. We don’t knowingly collect personal information from children for our own purposes. If you think we have, email privacy@invizo.io and we will delete it.

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page. If we make significant changes, we will also tell you by email or in the app before they take effect.

If you have questions about this policy or how we handle your information, contact Invizo: