Privacy Policy

1. Who We Are

SyncMerch ("we," "us," or "our") is an AI-powered product content platform for fashion and boutique merchants. We help merchants create, manage, and sync product listings using artificial intelligence.

If you have questions about this policy or your data, contact us at support@syncmerch.com.

2. Information We Collect

We collect the following categories of information:

Information you provide directly:

• Account information: email address, store name
• Product images you upload for AI analysis and content generation
• Product descriptions, titles, and metadata you create or edit
• Brand profile information (brand voice, target customer, style notes)
• Billing information (processed by Stripe - we do not store payment card details)

Information collected via integrations:

• Shopify store data: product catalog, product images, SEO metadata, inventory counts (accessed via Shopify OAuth with your explicit authorization)

Information collected automatically:

• Error and performance data via Sentry (with personal information filtering enabled)
• Server logs (request IDs, timestamps, HTTP status codes)

3. How We Use Your Information

We use your information to:

• Provide the SyncMerch service, including AI-powered product analysis and content generation
• Sync product data to your connected Shopify store
• Process payments and manage your subscription
• Send transactional emails (welcome email, account notifications)
• Monitor and fix errors in our service
• Improve the quality and reliability of our platform

We do not sell your personal information. We do not use your data for advertising. We do not share your data with third parties except as described in this policy.

4. AI Processing Disclosure

SyncMerch uses artificial intelligence to analyze your product images and generate content. When you use these features, your data is processed as follows:

• Product analysis and copywriting: Product images and text are sent to Google Vertex AI (Gemini) for structured extraction (garment type, fabric, color, etc.) and brand-voiced description generation.
• AI image generation: Product images are sent to Google Imagen for AI-powered image editing and generation.
• AI video generation: Product images are sent to Google Veo for short-form product video creation.
• Background removal: Processed locally on our servers using open-source software. Images are not sent to any third-party service for this feature.

Google does not use your data to train AI models. Under Google Cloud's Customer Data Processing Addendum, customer data sent to Vertex AI is not used for model training or improvement. Data is processed in memory and not retained beyond the processing session.

5. Third-Party Service Providers

We use the following third-party services to operate SyncMerch:

• Google Cloud Platform (Vertex AI, Cloud Storage, Cloud Run, Cloud Tasks) - AI processing, file storage, application hosting, and async job processing. Data processed in the United States.
• Supabase - Database hosting and user authentication. Data stored in the United States.
• Stripe - Payment processing. Stripe handles all payment card data directly and is PCI DSS Level 1 certified. We never see or store your full card number.
• Shopify - Product catalog sync (only when you connect your store via OAuth). We access only the data scopes you authorize.
• Resend - Transactional email delivery (welcome emails).
• Sentry - Error monitoring and performance tracking. Personal information filtering is enabled; we do not send IP addresses or cookies to Sentry.

Each provider processes data under their own privacy policy and data processing agreements. We have reviewed these agreements to ensure they meet our data protection standards.

6. Data Security

We protect your data with the following measures:

• All data is encrypted in transit (HTTPS/TLS) and at rest
• Shopify OAuth tokens are encrypted at rest using AES-128 (Fernet encryption)
• Database access is protected by row-level security policies scoped to your tenant
• File storage paths are tenant-scoped with path traversal prevention
• API endpoints are rate-limited to prevent abuse
• Internal service endpoints use Google Cloud OIDC authentication
• Error monitoring is configured to filter out personal information before transmission

7. Data Retention

• Account data: Retained for as long as your account is active. If you delete your account, your data is deleted within 30 days.
• Product images and media: Retained for as long as your account is active. Deleted when you delete individual products or your account.
• AI analysis results: Stored with your product data. Raw AI responses are not exposed through our API.
• Billing records: Retained as required by applicable tax and accounting laws.
• Server logs: Retained for up to 30 days for debugging purposes.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information in your account
• Delete your account and associated data
• Export your product data
• Disconnect your Shopify store at any time, revoking our access

To exercise any of these rights, email us at support@syncmerch.com. We will respond within 30 days.

9. Children's Privacy

SyncMerch is a business-to-business service designed for merchants and store owners. It is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13.

10. International Data Transfers

SyncMerch processes data in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. Our third-party service providers (Google, Stripe, Supabase) participate in recognized data transfer frameworks including the EU-US Data Privacy Framework.

11. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via email or through a notice in the application. The effective date at the top of this page indicates when the policy was last updated.

12. Contact

For privacy-related questions or requests, contact us at: support@syncmerch.com