As of October 8, 2026UM Sync keeps inventory in step across Shopify stores and stores only what it needs to do that. No customer data, no orders, no advertising, no analytics.Go to the legal notice of UBARTAS.MEDIA GmbHUBARTAS.MEDIA GmbH, Nicolaiweg 4b, 59494 Soest, Germany. Represented by Andrei Ubartas. Email: apps@ubartas.mediaThe store's address (…myshopify.com) and the access token from Shopify, encryptedPurpose: So the app can read and write inventory on the store's behalfHow long: The token is deleted immediately on uninstall, the address together with all other dataProduct and variant names, SKUs, the store's locationsPurpose: To match items and locations between the storesHow long: Until deletion (see below)Inventory quantities and a log of every change the app makesPurpose: For syncing, and so every number can be tracedHow long: Inventory quantities until deletion (see below), activity log entries for 90 daysPlan and subscription status (trial, end of billing period, scheduled change), the store's ID at ShopifyPurpose: Billing runs through Shopify; the app asks Shopify for the subscription status and remembers which plan applies and until when. It needs the store's ID to ask. It never sees payment detailsHow long: Until deletion (see below)Server logs (time, requested address)Purpose: Operations and securityHow long: Short termThe legal basis is the performance of the contract with the merchant (Art. 6(1)(b) GDPR), and for server logs our legitimate interest in secure operation (Art. 6(1)(f) GDPR).No data about the store's customers: no names, email addresses, postal addresses or phone numbersNo orders: the app has no access to themNo personal data of staff: the app signs in for the store, not for a personNo tracking cookies, no analytics tools, no ad networksWhen the app is uninstalled, it deletes the access token immediately. 48 hours later Shopify sends the request to delete all of the store's data; the app then deletes it immediately and completely. When a store leaves a group, its data is removed from that group immediately. In the server's backups, deleted data is kept for up to 14 more days and is then deleted there as well.Shopify, because the app reads and writes inventory through Shopify's API. The server is located in Germany; the hosting provider processes data on our behalf under a contract according to Art. 28 GDPR. No one else.You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). An informal email is enough. You can also lodge a complaint with a supervisory authority; the competent one is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia. apps@ubartas.mediaUBARTAS.MEDIA GmbH, Nicolaiweg 4b, 59494 Soest, GermanyRepresented by Andrei Ubartas, managing directorCommercial register: Amtsgericht Arnsberg, HRB 14703VAT identification number according to § 27a UStG: DE359381550Email: apps@ubartas.media