Privacy Policy

bin-sync · Last updated June 9, 2026

This Privacy Policy describes how bin-sync ("the app", "we", "us") collects, uses, and protects information when a merchant installs and uses the app on their Shopify store.

Information we collect

When you install bin-sync, we receive and store the following from Shopify:

• Your store domain (e.g. your-store.myshopify.com)
• An access token issued by Shopify, used to make API calls on your behalf

Depending on the features you use, the app requests the following access scopes from Shopify, and may read and/or write the corresponding data on your behalf:

• Products & listings — products, product listings (read/write)
• Orders & fulfillment — orders, fulfillments, inventory, locations, shipping (read/write)
• Customers — customer records and customer events/pixels (read/write)
• Discounts & pricing — discounts and price rules (read/write)
• Content & storefront — files, content, themes, translations, metaobjects, script tags (read/write)
• Analytics & reports — analytics and reports (read/write)
• Shopify Payments — payout and dispute records (read only)

We do not access payment card information, and we only access data necessary to provide the app's functionality.

How we use information

The access token is used solely to authenticate requests to Shopify's Admin API to manage products on your store at your direction. We do not sell, rent, or share your information with third parties.

Data retention

We retain your store domain and access token only for as long as the app is installed. When you uninstall the app or request deletion, the associated data is removed.

GDPR compliance

We honor Shopify's mandatory privacy webhooks. To request your data or its deletion, you (or Shopify on your behalf) may use the customer data request, customer redact, and shop redact endpoints, after which we delete the relevant records.

Contact

For privacy questions or data requests, contact contact@bintreesoftware.com.