1. Who provides Wunder Edit
Wunder Edit is provided by Wunder AI Limited (“Wunder”, “we”, “us” or “our”), with its registered address at Flat/Rm 811, 8/F, New Tech Plaza, 34 Tai Yau Street, San Po Kong, Kowloon, Hong Kong (Business Registration number 75966621). Privacy enquiries can be sent to support@wunderedit.com.
2. Our role and commitments
Our role depends on the information involved:
- Processor. For Shopify catalogue data handled on a merchant’s behalf, Wunder acts as a processor. The merchant remains the controller of that information and determines how it is used.
- Controller. For merchant contact details, support communications and website usage information, Wunder acts as a controller.
We also commit to the following:
- Wunder Edit does not sell personal information.
- Wunder Edit does not use merchant data for advertising.
- The current app does not access or process customer or order information.
3. Information we receive
Shopify and merchant account information
When a merchant installs the app, Shopify may provide store identity, domain, plan and contact details, installation status and the access credentials required to operate authorised app features.
Catalogue information
To provide editing and synchronisation features, the app may access product, variant, collection, inventory, location, vendor, tag, category, price, SKU, image, customs and related catalogue data within the permissions approved by the merchant. The app requests only the scopes needed for the features a merchant uses, and does not access customer or order information.
Technical, usage and support information
We may process IP address, browser and device details, request timestamps, diagnostic events, feature interactions, error reports and information a user sends in a support or contact request.
4. Why we process information
We use information to authenticate stores; display, search and edit catalogue records; synchronise authorised changes to Shopify; operate billing and support; secure and troubleshoot the service; prevent abuse; comply with law; and improve reliability and usability. We do not use this information for advertising, and we do not sell it.
5. Legal bases
Where UK or EEA data-protection law applies, processing may be based on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where required. The applicable basis depends on the information and the context in which it is processed.
6. Shopify APIs
Wunder Edit uses Shopify APIs only to provide documented app functionality and requests the least privilege necessary for those features. Shopify independently processes data under its own terms and policies. Merchants remain responsible for the lawfulness of catalogue and other information they control.
7. Service providers and subprocessors
We use the following service providers to operate Wunder Edit:
- Shopify: app installation, authentication and Shopify API access.
- Gadget, Inc.: application hosting, database, Shopify data synchronisation, backend processing and operational logs.
- Cloudflare, Inc.: website hosting, DNS, content delivery, network security and related technical logs.
- Email service provider: receiving and responding to support enquiries.
These providers may use their own subprocessors and may process data in countries including the United States and Canada, subject to their contractual and legal safeguards.
8. Storage and security
We use HTTPS encryption in transit, restricted administrative access, role-based access controls, protected credentials and the security controls provided by our hosting and infrastructure providers. Access to production data is limited to authorised personnel who require it to operate or support the service. No method of storage or transmission is completely secure.
9. International transfers
Information may be processed outside the merchant’s country, including in Hong Kong, the United States and Canada. Where required, we rely on contractual protections, recognised adequacy mechanisms or other lawful safeguards for international transfers.
10. Retention
Shop and catalogue data is retained while Wunder Edit is installed and for up to 30 days after an authenticated uninstall or deletion request, unless a longer period is required by law. Operational and security logs may be retained for up to 90 days. Support communications may be retained for up to 24 months. Residual copies in backups are removed through the normal backup-rotation process within 90 days.
See the data deletion page for uninstall and request procedures.
11. Rights and choices
Depending on location, individuals may have rights to access, correct, delete, restrict or object to processing, receive portable information, withdraw consent and complain to a supervisory authority. We may need to verify identity and route customer-data requests through the responsible Shopify merchant.
12. Cookies and analytics
The Wunder Edit marketing website does not currently use advertising cookies. Necessary technologies may be used for security, network delivery and essential site operation. Cloudflare may process limited technical information, such as IP addresses and request metadata, to provide these services. If optional analytics or advertising technologies are introduced, this policy and any required consent controls will be updated first.
13. App uninstallation and deletion
When the app is uninstalled, Shopify revokes access and sends the relevant webhook. We will stop using the access token and apply the documented deletion and retention process. Shopify mandatory privacy webhooks are handled as described on our data deletion page.
14. Children
Wunder Edit is a business service for authorised Shopify merchants and is not directed to children.
15. Changes
We may update this policy to reflect product, legal or operational changes. We will update the “Last updated” date and provide additional notice where required.
16. Contact and complaints
Contact support@wunderedit.com with privacy questions or requests. Where applicable, you may also complain to the data-protection authority responsible for your location. In Hong Kong, this is the Office of the Privacy Commissioner for Personal Data.