Privacy Policy

Effective: March 7, 2026

Shopzy (the "Service") provides an AI commerce agent service that currently supports Cafe24 and Shopify, and treats user privacy as a priority. This Privacy Policy explains what information the Service collects and how it is used.

1. Personal Information We Collect

• At signup: email address, password (stored as a hash), name (optional)
• When you connect a store via OAuth (Cafe24 or Shopify): store identifier (Cafe24 mall_id or Shopify shop domain), OAuth access token, refresh token
• Collected automatically: service usage logs, IP address

2. How We Use Personal Information

• To provide skin (design) browsing, editing, and management for your Cafe24 or Shopify store
• To retrieve product, order, and customer information through each platform's Admin API (Cafe24 Admin API, Shopify Admin GraphQL API)
• To improve service quality and analyze errors

3. Retention and Use Period

We retain your personal information for as long as you use the Service and delete it without delay when you withdraw your membership or remove the app.

• OAuth tokens: deleted immediately when the integration is disconnected
• Service usage logs: retained for up to 90 days, then destroyed

4. Deletion Procedure

When you remove the app or disconnect the integration, the OAuth tokens for that store are deleted immediately. When you withdraw your membership, your account information and all related data are deleted.

5. Safeguards

• OAuth tokens: encrypted at rest with AES-256-GCM
• Passwords: stored as bcrypt hashes
• Network: HTTPS (TLS) for all communication
• Database: minimum-privilege access and encrypted connections

6. Sharing With Third Parties

The Service does not share personal information with outside parties without your consent. The Service does, however, forward requests to the Admin API of the connected platform (Cafe24, Shopify, and similar) using your OAuth token in order to deliver the Service.

7. Your Rights

• You may disconnect the store OAuth integration at any time.
• You may withdraw your membership and request deletion of your personal information.
• To request access, correction, or deletion of your personal information: use the in-service settings or contact us by email.

8. Privacy Contact

For questions related to personal information protection, please contact us at the address below.

Email: our.first.fluke@gmail.com

9. Changes to This Policy

This policy may be updated to reflect changes in law or the Service. We will notify users within the Service when changes are made.