Privacy Policy

BackupPilot ("we", "our", "the App") is a Shopify application operated by Verz Design that creates backups of a merchant's store data and, where selected, uploads them to the merchant's own Google Drive account. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

When you install BackupPilot on your Shopify store, we access the store data required to create the backups you configure, which may include:

• Products, product variants, and product images
• Collections
• Orders
• Customers
• Inventory levels and locations
• Pages and blog posts / articles
• Themes and theme files
• Files uploaded to your store
• Metafields and metaobjects
• Translations
• Store settings and shipping settings

We only access the data types you have enabled in the app dashboard, and only at the moment a backup runs (manually or on your configured schedule). We do not access or read any data types you have not enabled.

2. Google Account Information

If you choose to connect Google Drive, we request a limited OAuth scope that only allows the app to create and manage files/folders that the app itself creates in your Drive - we cannot see, browse, or modify any other files in your Google Drive. We also request your Google account email address solely to display which Google account is connected in your dashboard.

3. How We Use Information

• To generate backup files (CSV/JSON exports compressed into a ZIP archive) of the data types you select
• To upload those backup files to a folder named after your store in your connected Google Drive account, if enabled
• To send you email notifications about backup success or failure, if you have provided a notification email address
• To operate scheduled ("Auto Backup") runs at the frequency you configure
• To provide and improve the App's core functionality and troubleshoot issues

We do not sell, rent, or share your store data or personal information with third parties for advertising or marketing purposes.

4. Where Your Data Is Stored

• Backup files: Each backup is stored on our server as a ZIP file so you can download it (and, once available, restore from it). We keep backup files for as long as your plan's backup history allows - the latest backup only on the Free plan, 90 days on Starter, and 365 days on Growth and Pro - and delete older files automatically. On the Growth and Pro plans, a copy is also uploaded to your own Google Drive; files in your Google Drive are under your control and are never deleted by the App. All of a store's backup files are deleted from our server when the store uninstalls the App and Shopify sends its shop data deletion request.
• Store settings and access tokens: Stored securely in our database to allow the App to operate on your behalf (e.g. running scheduled backups). Access tokens are never shared with third parties.
• Google Drive content: Once uploaded, backup files live in your own Google Drive account and are subject to your Google account's own storage and privacy controls, not ours.

5. Third-Party Services

BackupPilot relies on the following third-party services to function:

• Shopify Admin API - to read the store data you authorize
• Google Drive API - to upload backup files to your connected Drive account, if enabled
• Email delivery (SMTP) - to send backup result notifications to the email address you provide

Each of these providers has its own privacy policy governing how they handle data in transit through their services.

6. Data Retention

We retain store settings and access tokens for as long as the App remains installed on your store. If you uninstall the App, we delete your stored access tokens and Google Drive connection within a reasonable period. Backup files already uploaded to your own Google Drive remain there under your control and are not affected by uninstalling the App.

7. Shopify Mandatory Compliance Webhooks

In line with Shopify's requirements, BackupPilot implements the following data compliance webhooks:

• customers/data_request - if a customer requests their data from a store owner, we log the request; the App itself does not independently store customer PII outside of the backup files you generate.
• customers/redact - when Shopify notifies us that a customer's data must be deleted, we ensure no copy of that customer's data is retained in any App-managed storage outside your own backups.
• shop/redact - 48 hours after a store owner uninstalls the App, Shopify notifies us to erase that store's data from our systems, and we delete the store's stored settings and access tokens accordingly.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or request deletion of personal data we hold about you. You can exercise these rights by:

• Uninstalling the App from your Shopify admin, which triggers deletion of stored access tokens per Section 7 above
• Disconnecting Google Drive at any time from the App dashboard
• Contacting us directly using the details below

9. Security

We use industry-standard measures to protect the data we handle, including encrypted connections (HTTPS) for all data in transit and access controls on our database and servers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

BackupPilot is intended for use by Shopify merchants operating a business and is not directed at children. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or how your data is handled, please contact us: