Legal
Privacy Policy
How SyncO handles, stores, and protects your store and customer data.
Information we collect
When you install SyncO from the Shopify App Store, we receive basic account information from Shopify: your shop domain, email address, store name, and the access scopes you grant during installation. We use this to authenticate your session and associate your configuration with your store.
During normal operation, SyncO reads and writes sync data — orders, products, customers, and inventory levels — as described in the section below. We also collect aggregated usage analytics through PostHog to understand which features are used and where errors occur. PostHog analytics do not include personally identifiable information about your end customers.
How we use information
We use the information we collect to:
- Provide, operate, and maintain the SyncO synchronisation service.
- Authenticate and authorise access to your Shopify and Odoo accounts.
- Respond to support requests and communicate about your account or subscription.
- Detect and fix bugs; monitor service health and performance.
- Improve the product based on aggregated usage patterns.
We do not sell, rent, or share your data with third parties for marketing or advertising purposes.
Data we sync between Shopify and Odoo
SyncO is a data pipeline. The following types of records flow between your Shopify store and your Odoo instance, based on the sync flows you enable:
- Orders — order lines, customer details, shipping address, payment status, discount amounts, tax amounts, and fulfilment status. Orders created in Shopify are pushed to Odoo as sale orders (or equivalent configured record type).
- Customers — name, email address, billing and shipping addresses, and phone number.
- Products — product name, SKU, barcode, description, price, weight, images, and variant attributes.
- Inventory — stock quantities per location/warehouse, synced in both directions based on your mapping configuration.
This data is transmitted over encrypted connections and is processed transiently to perform the sync. SyncO does not build a long-term copy of your customer or order database beyond what is needed to track sync state and job history.
Where data is stored
SyncO is hosted on a cloud infrastructure provider. Job state and sync configuration are stored in our application database. Sync job queues and short-term job history are stored in an in-memory data store (Redis). Your Odoo credentials are encrypted at rest in a secrets store.
Third-party services we use that may receive data include: Shopify (source/destination of sync data), Odoo (source/destination of sync data), PostHog (aggregated analytics), and our hosting provider. See the Third-party services section for more detail.
Customer data and GDPR
If you or your end customers are located in the European Economic Area (EEA) or the United Kingdom, you may have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to access, correct, delete, or export personal data we hold.
To submit a data subject request, contact us at support@techspawn.com. We will respond within 30 days. Because SyncO is a data processor (we process data on your behalf as the controller), some requests may need to be addressed at the Shopify or Odoo level where the record of truth lives.
Cookies
SyncO uses a small number of cookies to operate the service:
- Essential cookies — required for authentication and session management inside the Shopify app. These cannot be disabled.
- Analytics cookies — set by PostHog to collect aggregated, anonymous usage data. These help us understand how the app is used and improve it. You may opt out of PostHog analytics by contacting us.
Data retention
We retain your store configuration and sync job history for the duration of your active subscription, plus a 30-day grace period after cancellation or uninstallation (to support re-installation without data loss). After the grace period, your configuration and job history are permanently deleted. Analytics data in PostHog is subject to PostHog's own retention policy.
Third-party services
SyncO relies on the following third-party services to provide the product:
- Shopify — source and destination for Shopify-side sync data; subject to Shopify's Privacy Policy.
- Odoo — source and destination for Odoo-side sync data; subject to your Odoo instance's own data handling (Odoo Online, Odoo.sh, or self-hosted).
- PostHog — product analytics; PostHog Privacy Policy.
- Hosting provider — cloud infrastructure for application servers, database, and Redis.
Children's data
SyncO is a business-to-business application. It is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at support@techspawn.com and we will delete it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify active subscribers by email or through the in-app notification system, and update the "Last updated" date at the bottom of this page. Continued use of SyncO after the effective date of the revised policy constitutes your acceptance of the changes.
Contact
For privacy-related questions or data subject requests, email support@techspawn.com or visit our contact page.
Last updated: 2026-04-26