Legal review required. This is a launch-ready policy template, but it must be reviewed against the actual business entity, infrastructure, subprocessors and target markets before publication.
1. Who provides Wunder Edit
Wunder Edit is provided by Wunder AI Limited (“we”, “us” or “our”). Registered address: Flat/Rm 811, 8/F, New Tech Plaza, 34 Tai Yau Street, San Po Kong, Kowloon, Hong Kong. Company number: TODO: Add company registration number.. Privacy enquiries can be sent to support@wunderedit.com.
2. Information we receive
Shopify and merchant account information
When a merchant installs the app, Shopify may provide store identity, domain, plan and contact details, installation status and the access credentials required to operate authorised app features.
Catalogue information
To provide editing and synchronisation features, the app may access product, variant, collection, inventory, location, vendor, tag, category, price, SKU, image, customs and related catalogue data within the permissions approved by the merchant. The exact access scopes must be confirmed against the production app configuration.
Technical, usage and support information
We may process IP address, browser and device details, request timestamps, diagnostic events, feature interactions, error reports and information a user sends in a support or contact request. We should avoid collecting customer personal data unless needed for a documented feature.
3. Why we process information
We use information to authenticate stores; display, search and edit catalogue records; synchronise authorised changes to Shopify; operate billing and support; secure and troubleshoot the service; prevent abuse; comply with law; and improve reliability and usability.
4. Legal bases
Where UK or EEA data-protection law applies, processing may be based on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where required. The applicable basis depends on the information and context and must be confirmed with legal counsel.
5. Shopify APIs
Wunder Edit uses Shopify APIs only to provide documented app functionality and should request the least privilege necessary. Shopify independently processes data under its own terms and policies. Merchants remain responsible for the lawfulness of catalogue and other information they control.
6. Service providers and subprocessors
Cloudflare is intended to provide hosting, network and security services. TODO: List every production subprocessor, its purpose and processing location, including database, authentication, logging, analytics, billing, email and support providers.
7. Storage and security
We use measures intended to protect information, including encrypted transport, controlled access and restricted Shopify scopes. No system is completely secure. TODO: Verify encryption at rest, access-control, backup and incident-response statements against production.
8. International transfers
Service providers may process information outside a merchant’s country. Where transfer restrictions apply, we will use an appropriate legal mechanism. TODO: Confirm transfer locations and safeguards.
9. Retention
We keep information only as long as needed for the purposes described, applicable legal obligations, security and dispute resolution. TODO: Add category-specific retention periods based on the production system. See the data deletion page for uninstall and request procedures.
10. Rights and choices
Depending on location, individuals may have rights to access, correct, delete, restrict or object to processing, receive portable information, withdraw consent and complain to a supervisory authority. We may need to verify identity and route customer-data requests through the responsible Shopify merchant.
11. Cookies and analytics
The marketing site should use only necessary storage unless optional analytics or advertising tools are configured with appropriate notice and consent. TODO: Document every production cookie and analytics service before enabling it.
12. App uninstallation and deletion
When the app is uninstalled, Shopify revokes access and sends the relevant webhook. We will stop using the access token and apply the documented deletion and retention process. Shopify mandatory privacy webhooks are handled as described on our data deletion page.
13. Children
Wunder Edit is a business service for authorised Shopify merchants and is not directed to children.
14. Changes
We may update this policy to reflect product, legal or operational changes. We will update the “Last updated” date and provide additional notice where required.
15. Contact and complaints
Contact support@wunderedit.com. Where applicable, you may also complain to your local data-protection authority. TODO: Add the relevant authority and any data-protection registration details.