Privacy Policy

Suppal collects information needed to operate the app and provide vendor collaboration features for Shopify merchants. This may include merchant account details, store information, app configuration settings, billing-related data, and support communications.

When merchants use vendor forms, vendor portals, or the API, we also process the product information submitted through those tools. That may include product titles, descriptions, variants, prices, images, metafields, SEO content, and vendor contact details that merchants choose to collect.

We use information to provide the Suppal service, authenticate users, generate secure vendor access links, process product submissions, sync approved data with Shopify, prevent abuse, improve performance, and respond to support requests.

We may also use limited operational data for analytics, troubleshooting, security monitoring, and compliance with legal obligations.

If you install Suppal through Shopify, we receive information from Shopify that is necessary to run the app, such as your shop domain and access to the store data authorized by you during installation.

We use Shopify data only to provide app functionality requested by the merchant, including reading and updating product-related information, rendering merchant-facing workflows, and syncing approved vendor submissions back to the merchant's Shopify store.

Vendor and supplier submissions are processed on behalf of the merchant using Suppal. Merchants control which fields vendors can access and what content is requested from them.

Vendor-submitted data is reviewed through the merchant approval workflow before publication to Shopify. Vendors do not receive direct access to the merchant's Shopify admin unless the merchant separately grants that access outside of Suppal.

We do not sell personal information. We may share data with service providers that help us host, secure, analyze, support, or operate Suppal, subject to appropriate confidentiality and data protection obligations.

We may also disclose information if required by law, to enforce our terms, to protect the security or integrity of the service, or as part of a business transaction such as a merger, acquisition, or asset sale.

We retain information for as long as necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain legitimate business records.

If you uninstall the app or request deletion, we will delete or anonymize applicable information within a reasonable period unless we are required or permitted to retain it by law or for legitimate security, billing, or compliance purposes.

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, or restrict certain personal information. Merchants may also update or remove certain data directly within Shopify or by contacting us.

If you would like to make a privacy-related request, contact us at support@suppal.io. We may need to verify your identity before processing certain requests.

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers of personal information.

We may update this Privacy Policy from time to time to reflect product changes, legal requirements, or operational updates. When we do, we will post the revised version on this page and update the effective date above.