Privacy Policy

Last updated: September 14, 2026

1. Overview

This Privacy Policy explains how SPOTYBUY TECHNOLOGY ("SPOTYBUY TECHNOLOGY", "we", "us", or "our") processes information when a Shopify merchant installs or uses Store360 (the "App").

Store360 is designed to help merchants review and understand operational information from their Shopify stores through dashboards, reports, inventory information, promotion analysis, payment and dispute visibility, and order risk insights.

2. Information processed through Shopify

Store360 may access and process information made available through Shopify's authorized APIs when required to provide features requested by the merchant.

Depending on the Store360 feature being used, this information may include:

• Shop and account information.
• Products, variants, SKUs, and inventory information.
• Orders, draft orders, refunds, returns, and fulfillment information.
• Discounts, offers, and promotion-related information.
• Shopify Payments payout and dispute information.
• Order risk and fraud-related information provided by Shopify.
• Customer information associated with orders, which may include names, email addresses, phone numbers, billing information, and shipping information when required by Store360 features and authorized by Shopify.

3. Information stored by Store360

Store360 is designed to minimize the amount of Shopify data stored in its own application database.

Store360 currently stores technical and merchant-level information needed to operate the App, such as:

• Shop domain.
• Shop name and basic store configuration information.
• Currency and timezone information.
• Store360 plan and account status.
• Installation and synchronization status information.
• Authentication and session information required to connect securely with Shopify.

Store360 does not currently maintain a separate persistent database of Shopify customer records, order histories, customer addresses, or payment card information. Shopify data used in reports and analysis is generally accessed from Shopify through authorized APIs as needed.

4. How information is used

Information processed by Store360 is used only for legitimate purposes related to providing and operating the App, including:

• Displaying store dashboards and analytics.
• Generating sales and operational reports.
• Reviewing products and inventory information.
• Analyzing discounts, offers, and promotions.
• Displaying payment and dispute information.
• Presenting order risk and fraud insights provided by Shopify.
• Operating and securing merchant accounts and application sessions.
• Providing technical support and troubleshooting.
• Maintaining and improving the reliability and security of Store360.

Store360 does not use Shopify customer information for advertising unrelated products or services.

5. Data minimization

Store360 is designed to process only the information reasonably necessary to provide its features. Access to Shopify information is limited by the permissions granted to Store360 and by Shopify's API access controls.

6. Data sharing and sale of personal information

SPOTYBUY TECHNOLOGY does not sell merchant or customer personal information.

Information may be processed by infrastructure, hosting, security, or other service providers only when reasonably necessary to operate, maintain, secure, or support Store360, or when required by law.

7. Data retention

Information stored by Store360 is retained only for as long as reasonably necessary to operate the App, provide support, maintain required business records, comply with applicable legal obligations, resolve disputes, and protect the security of Store360 and its users.

When a merchant uninstalls Store360, application sessions are removed as part of the uninstall process. Shopify may also send mandatory privacy and deletion requests requiring Store360 to delete shop or customer-related information where applicable.

8. Shopify privacy and deletion requests

Store360 supports Shopify's mandatory privacy request process. This includes requests relating to:

• Customer data access requests.
• Customer data deletion requests.
• Shop data deletion requests.

Store360 processes these requests in accordance with the data maintained by the App and the applicable Shopify requirements.

9. Security

SPOTYBUY TECHNOLOGY uses reasonable administrative, organizational, and technical safeguards intended to protect information processed through Store360 against unauthorized access, alteration, disclosure, or destruction.

Communications between Store360 and Shopify use encrypted network connections. Access to Store360 infrastructure is limited to authorized personnel and systems that require access to operate or support the service.

No online service or storage system can guarantee absolute security.

10. Payment card information

Store360 does not collect or store customers' full payment card numbers, card verification values (CVV), or online banking credentials.

Payment-related information displayed by Store360 is limited to information made available through authorized Shopify APIs for reporting, payout, dispute, or operational purposes.

11. Merchant responsibilities

Merchants remain responsible for their own Shopify stores, customer relationships, privacy notices, and compliance with laws and regulations applicable to their businesses.

12. Privacy rights and requests

Merchants or individuals with questions regarding information processed by Store360 may contact SPOTYBUY TECHNOLOGY.

Requests relating to Shopify customer information may also be initiated through the applicable Shopify merchant, and Shopify may transmit authorized privacy requests to Store360 where required.

13. Changes to this Privacy Policy

We may update this Privacy Policy when Store360 functionality, legal requirements, or data-processing practices change. The updated version will be published on this page with a revised "Last updated" date.

14. Contact

For privacy questions, data requests, or concerns related to Store360, contact: