Privacy Policy

This Privacy Policy describes how OMG Solutions Group sp. z o.o. (“we”, “us”, or “our”) collects, uses, stores, and shares information in connection with the Shopify application Shipping Profile Automation (the “App”) and the related website at https://www.omgsolutionsgroup.app/ (the “Site”).

By installing or using the App, or by using the Site, you agree to this Privacy Policy. If you do not agree, do not install or use the App.

This policy is written for merchants who install the App and for visitors to the Site. The App is an embedded Shopify admin app. It is not a storefront app and does not collect information from your store’s customers (buyers) for App purposes.

1. Who we are

Operator: OMG Solutions Group sp. z o.o.
App: Shipping Profile Automation
Contact for privacy questions: omgsolutionsgroup@gmail.com
Postal address: Zamknięta, lok. 1.5, 30-554 Kraków, Poland

We act as an independent app developer. Shopify is a separate company. Shopify’s handling of merchant and customer data is governed by Shopify’s own terms and privacy policy.

2. What the App does

Shipping Profile Automation helps Shopify merchants automatically assign product variants to the correct delivery (shipping) profiles based on merchant-defined rules (for example product type, tags, vendor, weight, or price). Merchants can preview changes, apply them in bulk, keep an activity log, exempt products, and optionally enable automation when products are created or updated.

3. Information we collect

3.1 Information from Shopify (via APIs and webhooks)

When you install the App, Shopify grants access according to the scopes you approve. The App currently requests:

• read_products — to read product and variant fields used by rules (for example title, type, tags, vendor, weight, price, SKU) and to react to product create/update events.
• write_shipping — to read delivery profiles and to move variants between shipping profiles.

We do not request access to customer, order, checkout, or payment data. We do not store buyer personal information for App functionality.

Through OAuth and Shopify sessions we may store:

• Shop domain (for example your-store.myshopify.com) and related shop identifiers
• Offline and online access tokens needed to call the Shopify Admin API on your behalf
• Granted API scopes
• For online sessions: staff user id and, when provided by Shopify, first name, last name, email, locale, and account-owner / collaborator flags

Through normal App use and webhooks we may store merchant-configured and operational data, including:

• Automation and plan-related settings (for example whether automation is enabled, subscription plan handle, shippable variant counts used for plan limits)
• Rules you create (name, priority, conditions, target shipping profile)
• Exempt product lists (product id and title snapshot)
• Product field snapshots used to avoid unnecessary reassignment
• Bulk preview/apply run status and summary stats
• Background job payloads and status
• Activity log entries (timestamps, product/variant ids, title/SKU snapshots, from/to profile names and ids, matched rule, trigger type, status, error messages)

3.2 Information you provide directly

We may receive information you send us by email or other support channels (for example your name, email address, shop domain, and the content of your message).

The App does not ask merchants for their customers’ personal data.

3.3 Website visitors

If you visit the Site, our hosting provider may collect standard technical data such as IP address, browser type, device type, pages viewed, and approximate location derived from IP. We do not currently use third-party analytics cookies on the Site.

The App itself runs inside Shopify Admin using Shopify session tokens. It does not place tracking cookies on your buyers’ devices and does not run on your online storefront.

3.4 Automated logs

We may generate operational logs related to App use (for example shop domain, webhook topic, job id, error messages) to operate, secure, and debug the App. We do not intentionally log customer email, phone, or order payloads from Shopify’s privacy webhooks.

4. How we use information

We use the information described above to:

• Provide, operate, and maintain the App (authenticate the shop, evaluate rules, preview and apply shipping-profile assignments, run automation, show activity)
• Enforce plan limits and Shopify billing / managed pricing status
• Respond to support requests
• Monitor reliability, security, and abuse
• Comply with law and with Shopify’s mandatory compliance webhook requirements
• Improve the App based on aggregated operational needs (not by selling personal data)

We do not sell personal information. We do not use merchant or store data for advertising networks. We do not use the App to contact your customers.

5. Legal bases (EEA / UK)

If you are in the European Economic Area or United Kingdom, we process personal data where needed to:

• Perform our contract with you (provide the App after install)
• Pursue legitimate interests (secure the App, prevent abuse, improve reliability), balanced against your rights
• Comply with legal obligations (including responding to valid deletion or disclosure requests)

Where consent is required for a specific Site technology, we will ask for it.

6. How we share information

We share information only as needed to run the App:

We do not sell or rent merchant data to third parties for their marketing.

Staff or contractors who help operate the App may access data only as needed to provide support or maintain the service, under confidentiality obligations.

7. International transfers

Your shop data may be stored and processed in the country where our hosting and database providers operate (which may include the United States or other countries outside your own). Those countries may have different data-protection laws than yours. We rely on appropriate safeguards offered by our providers and applicable law where required.

8. Data retention

You can uninstall the App at any time from the Shopify admin. Uninstalling stops the App’s access going forward according to Shopify’s uninstall flow and the retention rules above.

9. Shopify mandatory privacy webhooks

As required for Shopify App Store apps, we subscribe to and respond to:

• customers/data_request — request to view customer data. The App does not store customer or order data, so there is nothing to export. We acknowledge the request.
• customers/redact — request to delete customer data. The App does not store customer or order data, so there is nothing to delete. We acknowledge the request.
• shop/redact — request to delete shop data after uninstall. We delete stored shop sessions and shop data as described above.

We verify webhook authenticity (HMAC) before acting. Invalid requests are rejected.

Merchants who need a copy of data the App stores about their shop (rules, activity, settings) may contact us at omgsolutionsgroup@gmail.com.

10. Security

We use industry-standard measures appropriate to a small SaaS app, including:

• TLS/HTTPS for App traffic
• Shopify OAuth and session-token authentication for the embedded admin
• Webhook HMAC verification
• Access tokens stored in our database and used only to provide the App
• Tenant isolation by shop identity in application queries

No method of transmission or storage is 100% secure. If you believe your shop’s App data has been compromised, contact us promptly.

11. Children’s privacy

The App and Site are directed to business users (merchants), not to children. We do not knowingly collect personal information from children under 16 (or the age required in your jurisdiction).

12. Your rights

Depending on where you live (for example GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may have rights to:

• Access personal information we hold about you
• Correct inaccurate information
• Delete personal information (subject to legal retention needs and Shopify’s uninstall / redact process)
• Object to or restrict certain processing
• Data portability
• Opt out of “sale” or “sharing” of personal information where those terms apply (we do not sell personal information)
• Lodge a complaint with a supervisory authority

To exercise these rights, email omgsolutionsgroup@gmail.com and include your shop domain. We may need to verify that you are an authorized user of the shop.

For requests that Shopify routes through compliance webhooks, we follow Shopify’s process and timelines.

13. California / US state privacy notice (summary)

We collect the categories of information described in Section 3 (identifiers such as shop domain and staff email; commercial / App configuration data; internet / technical logs). We use them for the business purposes in Section 4. We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics about consumers. Authorized agents may contact us at the email above; we will verify the request.

14. Third-party services and links

The App depends on Shopify. Billing for paid plans is handled through Shopify’s billing / managed pricing. The Site or App may link to third-party sites; their privacy practices are their own.

15. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. For material changes, we may provide additional notice in the App or on the Site. Continued use of the App after an update means you accept the revised policy.

16. Contact us

Questions about this Privacy Policy or our data practices:

OMG Solutions Group sp. z o.o.
Email: omgsolutionsgroup@gmail.com
Address: Zamknięta, lok. 1.5, 30-554 Kraków, Poland
Website: https://www.omgsolutionsgroup.app/