Privacy Policy
Formateca Email (“the App”) is a Shopify app that lets merchants design and customise the notification emails their Shopify store sends. The App is provided by Soft Echo Pte. Ltd., 68 Circular Road, #02-01, Singapore 049422 (“we”, “us”). This policy explains what we collect when a merchant installs the App, why, and how we protect it.
1. Who this policy covers
It covers merchants who install the App on their Shopify store, and their staff who use it. The App does not collect personal data about the merchant’s customers (see section 3).
2. Information we collect
- Store information: your shop’s myshopify domain, store name, and the name and email address of the store account that installs the App.
- Access credentials: the access token Shopify issues when you install the App. We use it only to provide the App’s features.
- Product and collection information: titles, handles, images, vendor, tags and descriptions of your products and collections, read through Shopify’s API so you can preview templates with your own products.
- Your settings: the designs, colours, fonts, copy and other customisations you save in the App.
- Billing status: which plan you are on and whether your subscription is active. Payments are processed by Shopify; we never see or store card details.
- Technical logs: standard server logs (such as IP address, browser type and error messages) kept for security and troubleshooting.
3. What we do not collect
The App does not read, receive or store your customers’ personal data: no customer names, addresses, emails, phone numbers or order contents. Your notification emails are sent by Shopify, not by us. The templates we generate contain Shopify placeholders that Shopify fills in when it sends each email, so that data never passes through our systems.
4. How we use information
- To provide the App: generate your templates, show previews, and save your settings.
- To manage your subscription through Shopify’s billing system.
- To send you service emails, such as test emails you request, important changes to the App, and support replies.
- To keep the App secure and fix problems.
We do not sell your information, and we do not use it for advertising.
5. Legal basis (EEA/UK)
We process merchant data to perform our contract with you (providing the App), for our legitimate interests in keeping the App secure and improving it, and to meet legal obligations. Where we rely on legitimate interests, you can object at any time.
6. Who we share it with
We share information only with service providers who help us run the App, under contracts that require them to protect it:
- Shopify: platform, installation and billing.
- Cloud hosting providers that run the App and its database (currently DigitalOcean via Cloudways), and Vercel for this website.
- Email delivery providers used to send service and test emails (currently Google).
We may also disclose information if the law requires it. If our business is transferred, the information may move with it, under this policy.
7. International transfers
Our providers may process data outside your country, including in the United States and Singapore. Where required, we rely on appropriate safeguards such as standard contractual clauses.
8. How long we keep it
- While the App is installed, we keep the information needed to run it.
- When you uninstall the App, we delete your store data within 30 days. When Shopify sends us a data-erasure request (
shop/redact), we complete it within the period Shopify requires. - We keep billing records as long as tax law requires.
9. Security
Data is encrypted in transit (HTTPS). Access to our systems is limited to the people who need it, using key-based authentication. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires.
10. Your rights
Depending on where you live (for example under the GDPR, UK GDPR, Singapore’s PDPA or California law), you can ask to access, correct, delete or export your information, or object to or restrict how we use it. Email us at the address below and we will reply within 30 days. You can also complain to your local data protection authority.
11. Shopify’s data requests
We respond to Shopify’s mandatory privacy requests (customers/data_request, customers/redact, shop/redact). Because the App stores no customer personal data, customer requests normally have nothing to return or delete. We confirm this to Shopify.
12. Children
The App is a business tool and is not directed at children.
13. Changes
If we change this policy, we will update the date above. For material changes, we will notify merchants by email or in the App.
14. Contact
Soft Echo Pte. Ltd., 68 Circular Road, #02-01, Singapore 049422
Email: rohan@formateca.io