Privacy Policy

1. Introduction

This Privacy Policy describes how CategoryTree Pro ("we", "our", or "the App"), developed by Techglock Software Solutions, collects, uses, and shares information when you install and use our Shopify application.

2. Information We Collect

When you install CategoryTree Pro, we collect and store the following information:

• Shop information: Your Shopify store domain (e.g., yourstore.myshopify.com) as provided by Shopify during app installation.
• Category data: Category names, slugs, paths, SEO metadata, and hierarchical structure that you create within the app.
• Product assignment data: Associations between your Shopify product IDs and categories you define.
• Categorization rules: Rule configurations you create for automatic product categorization.
• Session data: Authentication tokens provided by Shopify for secure API communication.

We do NOT collect or store any customer personal data, payment information, or browsing behavior.

3. How We Use Your Information

We use the collected information solely to:

• Provide the category management functionality within your Shopify admin.
• Sync category data to Shopify Metaobjects for storefront display.
• Process webhook events to automatically categorize new or updated products.
• Generate CSV exports of your category and assignment data.
• Display dashboard statistics about your category usage.

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Data Storage and Security

• Your data is stored in a PostgreSQL database hosted on Supabase with encrypted connections.
• Caching is handled via Upstash Redis using encrypted REST API connections.
• All communication between your Shopify store and our servers uses HTTPS encryption.
• App Proxy requests are validated using HMAC-SHA256 signatures.
• We implement rate limiting to protect against abuse.

5. Data Retention

We retain your data for as long as the app remains installed on your store. When you uninstall the app, Shopify sends an app/uninstalled webhook and we delete your session data. Within 48 hours of uninstallation, Shopify sends a shop/redact webhook and we permanently delete all remaining shop data including categories, rules, product assignments, and sessions.

6. GDPR Compliance GDPR

CategoryTree Pro is fully GDPR compliant. We handle the following mandatory Shopify compliance webhooks:

• Customer Data Request: Since we do not store customer-specific personal data, we acknowledge the request and confirm no customer data is held.
• Customer Data Erasure: Same as above — no customer-specific data to delete.
• Shop Data Erasure: We permanently delete all shop-level data (categories, rules, assignments, sessions) within the required timeframe.

If you are located in the European Economic Area (EEA), you have the right to access, correct, or delete your personal data. Contact us at the email below.

7. Third-Party Services

CategoryTree Pro uses the following third-party services to operate:

• Shopify: Platform provider — see Shopify's Privacy Policy.
• Supabase: Database hosting — see Supabase's Privacy Policy.
• Upstash: Redis caching — see Upstash's Privacy Policy.
• Railway: Application hosting — see Railway's Privacy Policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: