Privacy Policy
Last updated: June 2026
Overview
SyncUp (“the App”) is a Shopify application that automatically creates tasks in your connected project management tools (such as ClickUp) when orders are placed in your Shopify store, and marks those tasks complete when orders are fulfilled. This Privacy Policy explains what data we collect, how we use it, and how you can request its deletion.
Data We Collect
Shop data: We store your Shopify shop domain and authentication tokens required to integrate with Shopify and your connected project management tools.
Order data: When an order is placed, we store the Shopify order ID and the corresponding task ID in your project tool so we can mark the task complete on fulfillment. We do not store customer names, email addresses, payment details, or any other personally identifiable information on our servers.
Project tool credentials: We store your connected project management tool's credentials (such as OAuth access tokens) and the target folder/list/board ID you choose to sync orders into. This data is stored securely and used solely to create and update tasks on your behalf.
Billing data: If you subscribe to a paid plan, we store the Shopify subscription ID and your current plan name. Payment processing is handled entirely by Shopify — we never see or store credit card numbers or billing details.
How We Use Your Data
We use the data described above exclusively to operate the App — creating tasks in your connected project tools, marking tasks complete on fulfillment, and enforcing plan limits. We do not sell, rent, or share your data with third parties for marketing purposes.
Data Retention and Deletion
Your data is retained for as long as the App is installed on your store. When you uninstall the App, Shopify notifies us and we schedule deletion of all your shop data within 48 hours.
To request immediate deletion of your data, please contact us at the email below. We will process deletion requests within 30 days.
Third-Party Services
The App integrates with:
- Shopify — to receive order webhooks and process billing. Their privacy policy governs their data handling.
- Project Management Tools (e.g. ClickUp) — to create and manage tasks. Their privacy policies govern their data handling.
- Neon (PostgreSQL) — our database provider, hosted in the US. Data is encrypted at rest and in transit.
- Vercel — our hosting provider. Application logs may be retained for up to 30 days for debugging purposes.
GDPR & CCPA
If you are a merchant in the European Economic Area or California, you have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact us at the email address below.
Contact
For privacy-related questions or data deletion requests, contact us at: zain.manda@gmail.com