1. Introduction

Woonic Backups (“we”, “us”, or “our”) provides an enterprise-grade cloud backup, version restoration, and store cloning service (“Service”) for Shopify merchants. This Privacy Policy has been adopted to inform you of our policies regarding the collection, use, disclosure, and protection of information obtained through the Woonic cloud-based app and website.

Please read this information carefully. By installing Woonic Backups or using our Service, you consent to the practices described in this Privacy Policy.

2. Personal and Store Data We Process

To provide automated and manual backups, we securely process the following categories of data directly from your Shopify store via standard API endpoints:

Store listings & Catalog: Products, variants, inventory levels, prices, custom tags, collections, and catalog image assets.
Design & Templates: Themes, Liquid layouts, CSS files, JavaScript configurations, and JSON templates.
Store Content: Pages, blogs, articles, and navigation menu structures.
Store Management: Store settings, metafield definitions, and discount configurations.
Merchant Contact Information: Store owner’s name, shop domain name, email address, physical shop address, and phone number.
Transactional Records: Customer metadata and order lists (excluding sensitive payment credentials).

Note: All subscription plan billing is processed natively and securely by Shopify. We do not collect or store credit card details or bank credentials.

3. Purpose and Legal Basis for Data Processing

We process your Personal and Store Data in accordance with global data protection laws (including the EU General Data Protection Regulation - GDPR, Art. 6):

Performance of a Contract (Art. 6(1)(b) GDPR): To run daily automated backup scans, maintain historical diff records, generate manual downloadable exports, and facilitate secure store duplication to staging sandboxes.
Legitimate Interests (Art. 6(1)(f) GDPR): To troubleshoot operational errors, deliver technical notifications regarding critical backup successes/failures, maintain system security, and respond to your customer support queries.

4. Data Storage, Security & Hosting

We are committed to the highest industry standards of data security:

Redundant Hosting: All backup data is encrypted both in transit (using TLS/SSL) and at rest (using AES-256 bank-grade encryption) and stored in secure Amazon Web Services (AWS) S3 clusters.
Access Control: Access to backup databases is strictly restricted using encrypted key authentication and multi-factor authorization systems.

5. Data Storage Period & Deletion Policy

We retain your backup data only as long as necessary to provide the Service or to comply with Shopify's platform requirements:

Active Term: Your backups are stored in your S3 archive for up to 1 year depending on your active subscription plan.
Immediate Clean-Up on Uninstall: When you uninstall Woonic Backups from your Shopify store, we receive a real-time redaction webhook. All of your store's backups, log files, and data entries are **automatically and permanently purged** from our live systems within 30 business days.

6. GDPR & CCPA Compliance Rights

Under global privacy frameworks (GDPR and CCPA), you and your store's customers have the following rights:

Right of Access & Portability: You can request a full copy of your store's backup logs and datasets at any time.
Right to Rectification: You can update your contact information or billing profile at any time.
Right to Erasure (Right to be Forgotten): You can request that all backup files associated with your store or a specific customer's records be permanently deleted immediately.

To exercise any of these rights, simply email your request to our customer support desk at **info.woonic@gmail.com**. We will process and fulfill your request within 30 business days.

7. Contact and Support

If you have any questions about this Privacy Policy, your data rights, or our security infrastructure, please contact us directly:

✉️ Email: info.woonic@gmail.com