Alfreya Sync & Translate
Privacy Policy
Alfreya Sync & Translate (the “App”) is a Shopify app made by Alfreya, a brand of Konsiyer Teknoloji Anonim Şirketi, a company registered in Istanbul, Türkiye (“Alfreya”, “we”, “us”), which is the data controller for the information described here. The App copies products from a merchant’s main (“parent”) Shopify store to the merchant’s other (“child”) Shopify stores as translated, priced drafts, and keeps those copies in sync.
This policy explains what information the App collects when a merchant installs it, how we use and share that information, and the choices merchants have. It applies only to the App. Alfreya’s website and other products are covered by our general privacy notice, and the merchant’s own storefront by the merchant’s policy.
Information we collect
When you install the App, it is granted access to your store through Shopify’s API with the permissions “write products” and “write inventory”. It does not request access to customers, orders, checkouts or payments, and it collects no information about your customers or shoppers.
Store and account information
- Your store’s Shopify domain and ID, primary language and currency.
- The store’s contact email address, as reported by Shopify.
- The Shopify user ID of the staff member who sends, approves or changes a store connection, confirms a vocabulary term or enters an international price, so the App can show who did what.
- Your App settings, the stores you connect, and the status of each connection.
- Your App plan and billing cycle as reported by Shopify, and a count of product syncs for usage billing. Payments are handled entirely by Shopify; we never see card or bank details.
- Access tokens issued by Shopify so the App can act on your store, stored securely and refreshed automatically.
Product information
- Product, variant and media IDs in both stores, and product content needed to make and update the copy: titles, descriptions, SEO fields, tags, product types, vendors, option names, SKUs, prices, image URLs and image alt text.
- The translations the App produced, and the international prices you entered.
- A record of sync activity: what was copied, when, and any errors, so you can see it on the Activity page.
Technical information
- Webhook delivery records (topic, store domain and time) used to avoid processing the same event twice, and server logs our hosting provider keeps for a limited period for troubleshooting and security.
The App uses Shopify session tokens to authenticate you inside the Shopify admin. It sets no advertising or tracking cookies and uses no third-party analytics.
How we use information
- To create, translate, price and update product copies in the child stores you connect.
- To show sync status, errors and history in the App and on the product page.
- To email the store’s contact address about the App’s own work, for example when a vocabulary scan finishes. We do not send marketing email from the App.
- To report usage to Shopify so you are billed correctly for your plan.
- To keep the App secure, investigate problems and answer support requests.
- To comply with legal obligations.
We do not sell information, share it for advertising, or use your product content to train artificial intelligence models.
Legal basis
Where data protection law such as the EU or UK GDPR or Türkiye’s Law No. 6698 on the Protection of Personal Data (KVKK) applies, we process store and account information because it is necessary to provide the App you installed (performance of a contract), and for our legitimate interests in keeping the App secure and working. Product content you sync is processed on your behalf and on your instructions.
Service providers we share information with
We share information only with the providers below, only as needed to run the App, and under agreements that require them to protect it:
- Shopify — the platform the App runs on; product copies are written to your child stores through Shopify’s API, and billing is handled by Shopify.
- Vercel Inc. (United States) — hosts the App’s servers.
- Neon, Inc. — hosts the App’s database, located in Frankfurt, Germany (Amazon Web Services).
- Google LLC (Gemini API) — receives the product text to be translated (titles, descriptions, SEO fields, tags, product types, vendors, option names and image alt text) and returns the translation. We use Google’s paid API service, under whose terms Google does not use this content to improve its products.
- Resend, Inc. (United States) — delivers the App’s notification emails to the store’s contact address.
We may also disclose information if required by law, to protect our rights or users, or as part of a merger or acquisition, in which case this policy continues to apply.
International transfers
Alfreya is based in Türkiye and our providers operate in the European Union and the United States, so your information may be processed outside your country. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses offered by these providers.
How long we keep information
- While the App is installed, we keep the information above for as long as it is needed to keep your copies in sync.
- When you uninstall the App, its access token is deleted at once and all connections involving your store stop. Product mappings are kept briefly so that a reinstall does not create duplicate products.
- 48 hours after uninstall Shopify asks us to erase your store’s data, and we delete your store record, connections, product mappings, translations, prices and history from the database. Database backups that may still contain it expire within 7 days.
Product copies already created in your child stores belong to you and stay in those stores.
Security
All traffic to and from the App is encrypted with TLS, the database is encrypted at rest by our provider, and access to production systems is limited to the people who operate the App. Requests from Shopify are verified before they are processed. No method of transmission or storage is perfectly secure, but we work to protect your information and will notify affected merchants and authorities of a breach as the law requires.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict its processing, and to complain to a data protection authority — including Türkiye’s Personal Data Protection Authority (KVKK) or your local EU authority. Uninstalling the App deletes your data as described above; to exercise any other right, email us at info@alfreya.com or write to the address below. Under KVKK you may also learn whether your data is processed and to whom it was transferred, and ask that corrections or deletions be passed on to those recipients. Requests are free of charge, and we will answer within 30 days.
If your customers contact you about their data, note that the App holds none; Shopify’s customer data requests are acknowledged with nothing to return or delete.
Children
The App is a business tool for Shopify merchants and is not directed at children.
Changes to this policy
We may update this policy as the App or the law changes. We will post the new version on this page with a new effective date and, for significant changes, tell merchants by email or in the App.
Contact
Konsiyer Teknoloji Anonim Şirketi (Alfreya)
MERSIS No: 0576119170800001
Atatürk Mah. Ertuğrul Gazi Sk. Metropol İstanbul Sitesi C1 Blok No: 2B İç Kapı No: 376, Ataşehir / İstanbul, Türkiye
info@alfreya.com