Privacy Policy

Personal Data We Process

When you install our app, we collect the email address associated with your Shopify merchant account. We use this to send you product updates, feature announcements, promotional communications, and to handle any support requests you submit.

Beyond your email, our app reads certain data from your Shopify store via Shopify's API (such as store resources including products, orders, or other data required for the app to function) solely to operate the Service. This data is processed in real time and is never stored in our own systems — it remains in your Shopify store at all times. We do not collect or retain any personal data belonging to your end customers.

How We Use Your Data

We use your email address to operate and improve the Service: to communicate important changes, respond to support requests, and occasionally send you information about new features or offers from Eberna. You can opt out of promotional communications at any time by contacting us or using the unsubscribe link in any email we send.

Sharing Your Information

We do not sell or share your personal data with third parties for commercial purposes. We may disclose your information only when required by law — for example, in response to a court order, subpoena, or other lawful request — or to defend our legal rights.

Data Retention

We keep your email address for as long as your account is active or as needed to provide the Service. If you uninstall the app or request deletion of your data, we will remove it within 30 days, unless we are required to retain it to comply with a legal obligation, resolve a dispute, or enforce an agreement.

Security

We apply technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or loss — including encrypted connections (TLS) and access controls on our infrastructure. Our servers are located within the European Union. While we take security seriously, no system can guarantee absolute protection, and we cannot warrant that our measures will prevent every possible breach.

Legal Basis for Processing (GDPR)

Eberna is based in the European Union and processes data in accordance with the General Data Protection Regulation (GDPR). The legal bases we rely on are:

• Performance of a contract (Art. 6(1)(b) GDPR) — processing your email is necessary to provide the Service you signed up for.
• Legitimate interests (Art. 6(1)(f) GDPR) — for security monitoring and improving the reliability of the Service, where those interests are not overridden by your rights.
• Consent (Art. 6(1)(a) GDPR) — for promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

All data is processed and stored within the European Economic Area (EEA). We do not transfer personal data to countries outside the EEA.

Cookies and Local Storage

Our app uses only technically necessary cookies required for session management and authentication with Shopify. We do not use analytics cookies, advertising cookies, or any third-party tracking technologies. No personal data is stored in your browser beyond what is strictly needed for the app to function.

Your Rights

Under the GDPR you have the right to: access the personal data we hold about you; request correction or deletion of that data; object to or restrict how we process it; and receive a portable copy of the data you provided to us. You also have the right to lodge a complaint with the supervisory authority in your EU Member State of residence or place of work. To exercise any of these rights, contact us at hey@eberna.tech. We will respond within 30 days.

Eligibility

Our apps are intended for commercial use by businesses. By installing or using the Service, you confirm that you are at least 18 years of age (or the age of majority in your jurisdiction) and that you are authorised to act on behalf of the merchant account associated with your Shopify store.

Changes to This Policy

We may revise this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you by email. Continued use of the Service after a change takes effect constitutes your acceptance of the updated policy.

Contact

For any questions about this Privacy Policy, or to exercise your data rights, reach us at hey@eberna.tech.