Webtorn: billiger.de Connect

Privacy policy

Effective: August 30, 2026

1. Controller

2. Data processed

The app processes the Shopify store domain, server-side OAuth session data and feed settings saved by the merchant. To generate the feed, it reads active products and variants, including title, description, vendor, product type, price, inventory, EAN, image URL and product link. The app does not request order, customer or payment data.

3. Purpose and legal basis

Processing provides the merchant-enabled product feed, secure authentication, saved settings, and reliable operation. Applicable legal bases include Article 6(1)(b) and (f) GDPR.

4. Recipients

Shopify and our hosting and database providers process data only as required. A Shopify-signed app proxy delivers the feed. The merchant decides whether and with which authorized comparison or feed service to register that URL.

5. Retention and deletion

OAuth sessions and feed settings are generally retained until the app is uninstalled or the store is deleted. Verified Shopify uninstall and shop-redaction webhooks remove active store-related sessions and settings.

6. WhatsApp and email support

Contact data is not sent to WhatsApp or an email provider before the merchant selects the corresponding link. The selected provider's privacy terms apply after it opens.

7. Data subject rights

Subject to the GDPR, individuals may request access, correction, erasure, restriction, portability and objection, and may complain to a competent supervisory authority.

8. Security

The app uses HTTPS, Shopify session tokens, HMAC verification for webhooks and app proxy calls, and server-side access controls. Access tokens are never included in the browser or product feed.