Privacy Policy

App Name: StorePort Import Export Company: Sooce Ltd Effective Date: June 12, 2026 Last Updated: August 18, 2026

1. Introduction

This Privacy Policy describes how Sooce Ltd ("we", "us", or "our") collects, uses, and protects information when you use StorePort Import Export (the "App"), a Shopify embedded application that enables merchants to import and export Shopify store data using CSV and Excel files, with optional integration to Google Drive.

By installing or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please uninstall the App and discontinue use.

2. Information We Collect

2.1 Shopify Store Data

When you install the App and grant the required permissions, we access Shopify store data through the official Shopify API. This may include:

• Products and variants - titles, descriptions, prices, SKUs, inventory levels, images, and metafields
• Orders - order IDs, line items, customer references, fulfillment status, and financial data
• Customers - names, email addresses, phone numbers, and address information stored in your Shopify store
• Collections - collection titles, rules, and product assignments
• Inventory - inventory levels and locations
• Other resource types - any additional Shopify resource types you explicitly choose to import or export through the App

We access this data only to perform the specific import or export operation you initiate. We do not read your store data for any other purpose.

2.2 OAuth Tokens and Authentication Credentials

When you connect a Google Drive account to the App, we store:

• Access tokens and refresh tokens issued by Google to authorize the App to act on your behalf
• Basic account identifiers (such as Google user ID) used to associate the token with your merchant account

These tokens are stored securely and are used exclusively to read or write files to your cloud storage account as directed by you.

We do not store your Google account password. We do not have access to your password at any time.

2.3 App Usage and Configuration Data

We collect and store:

• Your Shopify shop domain (e.g., your-store.myshopify.com) to identify your account within the App
• Import/export job history - job type, status, timestamp, and file name - so you can review past operations
• App configuration and settings you have saved (e.g., field mapping preferences, default options)
• Error logs and diagnostic information related to import/export operations, used for troubleshooting

2.4 Information We Do Not Collect

We do not collect:

• Payment card numbers or financial credentials
• Personally identifiable information beyond what is present in your Shopify store data and what is necessary to operate the App
• Data from your Google Drive account beyond the files and destination folders you explicitly select with Google Picker and the export files the App creates for you
• Behavioral analytics, advertising identifiers, or cross-site tracking data

3. How We Use Your Information

We use the information described above for the following purposes:

• To perform import/export operations - reading your Shopify store data to export it to a file, or writing data from an uploaded or cloud-hosted file to your Shopify store
• To read and write files in your connected cloud storage - reading a file you explicitly select with Google Picker and creating export files in My Drive or in a folder you explicitly select
• To maintain your account and settings - storing your preferences, job history, and authentication tokens so the App functions correctly between sessions
• To provide customer support - using job logs and error details to diagnose and resolve issues you report
• To improve the App - aggregated, non-identifiable usage patterns (e.g., most commonly exported resource types) may be used to guide product decisions

We do not sell, rent, or share your data with third parties for marketing or advertising purposes.

4. Third-Party Services and Data Access

4.1 Shopify

StorePort Import Export is built on the Shopify platform and uses the Shopify API. When you install the App, you authorize it to access specific scopes of your Shopify store. The App requests only the permissions required to perform import and export operations on the resource types you use.

Your use of Shopify is governed by Shopify's own Privacy Policy: https://www.shopify.com/legal/privacy

4.2 Google Drive

Connecting a Google account is entirely optional. The App works without it, and you may disconnect at any time.

If you choose to connect a Google account:

• You authorize the App through Google's official OAuth 2.0 consent flow. We never see or store your Google password
• The App requests only `drive.file` (https://www.googleapis.com/auth/drive.file). This scope allows the App to access files and folders you explicitly share with it through Google Picker and to create and manage the export files the App creates for you. The App does not request drive.readonly
• File and folder selection takes place in Google's Picker. The App does not list, scan, or index the rest of your My Drive or shared drives
• For imports, the selected file may be copied to protected job storage long enough to analyse and execute the job and, where your plan provides file retention, for the applicable retention period. It is deleted in accordance with the retention rules described below
• For exports, the App creates the requested file in My Drive or in the destination folder you selected with Google Picker
• Each merchant connects their own Google account. We do not use shared or service-level Google accounts that commingle data across merchants

4.3 Google API Services Limited Use

StorePort Import Export's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we confirm that:

• Google user data is used only to provide and improve the import and export features you have requested
• Google user data is not sold, and it is not transferred to third parties except as necessary to provide the Service, to comply with applicable law, or as part of a merger or acquisition after notice to you
• Google user data is not used for advertising purposes of any kind
• Google user data is not used to develop, improve, or train generalized artificial intelligence or machine learning models
• Humans do not read your Google user data, except where you have given explicit permission (for example, to troubleshoot a support request you have raised), where it is necessary for security purposes such as investigating abuse, or where required by applicable law

Your use of Google Drive is governed by Google's Privacy Policy: https://policies.google.com/privacy

You can revoke the App's access to your Google account at any time from your Google Account security settings under "Third-party apps with account access", or by disconnecting from the Connections page inside the App.

4.4 Hosting and Infrastructure

The App is hosted on infrastructure provided by Sooce Ltd. Our production API operates at https://storeport.api.btpro.net. We take reasonable steps to ensure our hosting environment meets industry-standard security practices.

5. Data Storage and Security

5.1 Where Data Is Stored

All persistent App data - including your Shopify access token, Google OAuth tokens, and job history - is stored on servers operated for the App at https://storeport.api.btpro.net. We do not currently use third-party analytics, advertising, or data-broker services.

5.2 Security Measures

We implement the following security practices:

• OAuth tokens are stored encrypted at rest
• All communication between the App and Shopify and Google Drive occurs over HTTPS/TLS
• All communication between your browser and the App backend occurs over HTTPS/TLS
• Access to production systems is restricted to authorized personnel only
• We follow Shopify's security requirements for embedded apps, including HMAC validation of all requests originating from Shopify

5.3 No Guarantees

While we take security seriously, no system is completely secure. We cannot guarantee the absolute security of your information. If we become aware of a data breach that affects your information, we will notify you in accordance with applicable law.

6. Data Retention and Deletion

6.1 Retention During Active Use

We retain your App data - including your OAuth tokens, job history, and settings - for as long as the App is installed on your Shopify store.

6.2 Deletion Upon Uninstall

When you uninstall the App from your Shopify store:

• Your Shopify access token is revoked and deleted from our systems
• Your Google Drive OAuth tokens are deleted from our systems
• Your job history and settings are deleted

This process is initiated automatically upon receiving Shopify's app/uninstalled webhook. Deletion is completed within 30 days of uninstall.

6.3 Manual Deletion Requests

You may also request deletion of your data at any time by contacting us at emrah.ozyazgan@btpro.net. We will confirm deletion within 30 days of receiving your request.

6.4 Job Files and Temporary Processing Data

Files selected from Google Drive may be copied to protected job storage while the App analyses and executes the requested import. Temporary files are deleted after processing or expiry. If your plan includes job-file retention, files and result artifacts may be retained for the period shown in the App, after which they are deleted. Export files created in your Google Drive remain there until you delete them; revoking the App's access prevents StorePort from accessing them but does not delete them from your Drive.

7. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including:

• Right to access - request a copy of the data we hold about you
• Right to correction - request correction of inaccurate data
• Right to deletion - request that we delete your data (see Section 6.3)
• Right to restriction - request that we limit how we use your data
• Right to data portability - request your data in a structured, machine-readable format
• Right to object - object to certain uses of your data

To exercise any of these rights, contact us at emrah.ozyazgan@btpro.net. We will respond within 30 days. Note that some rights may be subject to limitations under applicable law.

8. Cookies and Tracking

The App is an embedded Shopify app and runs within the Shopify Admin interface. We use the minimum cookies required for the App to function:

• Session cookies - to maintain your authenticated session within the App
• CSRF protection tokens - to protect against cross-site request forgery

We do not use:

• Third-party advertising cookies
• Cross-site tracking technologies
• Analytics cookies from services such as Google Analytics, Mixpanel, or similar

Shopify's own session and cookie practices apply within the Shopify Admin environment. Refer to Shopify's Privacy Policy for details.

9. Children's Privacy

The App is designed for use by Shopify merchants and is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at emrah.ozyazgan@btpro.net and we will delete it promptly.

10. International Data Transfers

If you are located outside the country where our servers are hosted, your data may be transferred to and processed in a different jurisdiction. By using the App, you consent to such transfer. We take steps to ensure that any such transfers are subject to appropriate safeguards.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last Updated" date at the top of this document
• Post the updated policy at our App's privacy policy URL
• For material changes, provide notice through the Shopify Admin interface or by email to the store owner's contact email on file

Continued use of the App after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: emrah.ozyazgan@btpro.net Company: Sooce Ltd Website: https://storeport.api.btpro.net

We aim to respond to all privacy-related inquiries within 5 business days.

*This Privacy Policy applies exclusively to the StorePort Import Export Shopify application. It does not apply to any other products or services offered by Sooce Ltd.*