Privacy Policy

Controller

This app is operated by Tech-Attack de Luis Nunes (Portugal). For privacy matters, contact: geral@tech-attack.net.

What the app does

TechSync PayPal Tracking helps Shopify merchants sync fulfillment tracking information to PayPal for eligible PayPal-paid orders.

Data we process

• Shop domain and Shopify app session data.
• PayPal OAuth connection data (access token, refresh token, expiry metadata).
• PayPal account email and account identifiers returned by PayPal APIs when available.
• Order reference data required for tracking sync, including order ID, tracking number, carrier, and sync status logs.

Purposes and legal basis (EU/EEA)

• Service delivery (contract): connect Shopify and PayPal and transmit tracking updates requested by the merchant.
• Security and fraud prevention (legitimate interest): protect app sessions and API credentials.
• Operational reliability (legitimate interest): maintain logs and troubleshoot failed sync attempts.
• Compliance (legal obligation): retain records when required by applicable law.

Sharing and processors

We share data only as required to provide the service. Main processors/sub-processors include Shopify, PayPal, and the hosting/database infrastructure used to run the app. We do not sell personal data.

International transfers

Data may be processed in countries outside your jurisdiction (including outside the EEA) through Shopify, PayPal, and hosting providers, subject to applicable safeguards required by law.

Retention

• Session and connection data: retained while the app remains installed and connected.
• Sync logs: retained for up to 12 months, unless a longer period is required for legal or security reasons.
• Upon app uninstall or valid deletion request, data is deleted or anonymized within a reasonable operational period unless legal retention is required.

Data subject rights (EU/EEA)

You may request access, rectification, deletion, restriction, portability, or objection by emailing geral@tech-attack.net. You may also lodge a complaint with your local data protection authority.

Marketing and anti-spam

Data obtained via Log In with PayPal is not used for unsolicited marketing. Merchants and users are not automatically subscribed to marketing communications.

Security

We apply reasonable technical and organizational safeguards, including scoped credentials, secure transport, and access controls appropriate to the service.

Changes

We may update this policy from time to time. Material updates will be reflected by changing the date above.