CartCraft eBay Importer

Appearance

Privacy Policy for CartCraft eBay Importer ​

Last Updated: September 2, 2026

This Privacy Policy describes how CartCraft ("we," "us," or "our") collects, uses, processes, and protects information when you install and use the CartCraft eBay Importer Shopify Application (the "App").

1. Information We Do Not Collect (No Customer PII) ​

We strongly prioritize merchant and store visitor privacy. CartCraft eBay Importer operates strictly on store catalog data and does not collect end-customer personal data:

  • No Customer PII: We do not collect, store, process, or share any Personally Identifiable Information (PII) of your store's end-customers (such as customer names, shipping addresses, email addresses, phone numbers, payment details, or order histories).
  • No Visitor Tracking or Profiling: We do not track individual storefront visitors across websites, create behavioral profiles, or place tracking cookies on your storefront for advertising or external analytics.

2. Information We Access & Collect ​

To provide core app functionality (importing eBay items, calculating currency markups, and managing background queues), we access and process minimal store technical data provided through Shopify APIs:

A. Store & Merchant Information ​

  • Shopify Domain & Store ID: Used to authenticate your store session and maintain your import preferences.
  • Shop Owner Email & Name: Used strictly to send onboarding welcome emails, uninstall confirmation alerts, and respond to engineering support requests you initiate.
  • Primary Store Currency & Locale: Synced automatically from your Shopify Admin settings to convert source eBay prices and render localized app interfaces.
  • Fulfillment Location ID: Used to assign inventory stock quantities to your designated Shopify location.

B. Product & Import Data ​

  • Imported Listing Data: Product titles, descriptions, images, variation attributes (color, size, model), SKUs, prices, and stock counts.
  • Product Metafields: Stores reference metadata (metafield:ebay_importer.ebay_item_id) on your Shopify products to prevent duplicate listings and enable 1-click re-syncing.
  • Import Profiles & Logs: Saved pricing markup formulas (percentage/fixed add), publishing rules (active vs. draft), and import batch history logs.

3. How We Use Your Information ​

We use the data collected exclusively to deliver and optimize app services:

  • Product Catalog Synchronization: To fetch public listing details from official eBay Browse APIs and create/update products in your Shopify store.
  • Currency Conversion & Price Markups: To auto-convert source eBay currencies (USD, EUR, GBP, CAD, AUD) using live exchange rates and apply your profile markup rules.
  • Customer & Merchant Support: To respond directly to support inquiries submitted via the Contact Support modal in your app dashboard.
  • Service Notifications: To deliver transactional lifecycle emails (e.g., installation onboarding guides and uninstallation survey alerts).

4. Third-Party API Services ​

To fetch public product listings and convert foreign currencies, CartCraft interacts with trusted third-party APIs:

  • Official eBay Browse API (Buy API): We fetch public eBay product details (titles, descriptions, images, pricing, and variation aspects) using eBay Application Credentials (client_credentials grant). No private eBay user data is requested or stored.
  • Exchange Rate Providers: Live foreign currency exchange rates are retrieved periodically from public exchange rate data services.

We do not sell, rent, or trade store or product data to third-party advertisers, data brokers, or marketing networks.

5. Data Retention & Mandatory Shopify GDPR Compliance ​

  • Data Retention: We retain your store configuration, import profiles, product mappings, and job logs for as long as the App remains installed on your store.
  • Shopify Compliance Webhooks: We strictly honor mandatory Shopify privacy compliance webhooks (customers/data_request, customers/redact, shop/redact):
    • Shop Redact (shop/redact): Upon receiving a shop redact request from Shopify, we execute a complete soft/hard redaction of store PII (shopEmail, shopOwner, tokens) within 48 hours.

6. Data Security ​

We enforce industry-standard security measures to safeguard store data:

  • Encrypted Transmission: All communication between Shopify, our backend servers, and eBay APIs occurs over secure HTTPS (TLS 1.3) encryption.
  • Secure OAuth Authentication: Session authentication is handled strictly via official Shopify OAuth tokens stored securely in Neon PostgreSQL.
  • No Stored Credit Card Data: Billing is handled entirely through official Shopify Billing GraphQL APIs (appSubscriptionCreate). We never handle or store payment credentials.

7. Your Rights & Contact Information ​

Depending on your store's location, you may have rights under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), or other privacy laws regarding your data.

If you have questions about this Privacy Policy, wish to request data erasure, or need assistance, contact our team:

  • Email Support: cartcraftchannel@gmail.com
  • App Support: Click Need Assistance? directly inside your CartCraft eBay Importer dashboard.