Privacy Policy

Last updated: November 2026

Aurabase ("we", "our", or "us") provides backend data connection services between Shopify stores and automated sales pipelines. This Privacy Policy describes how merchant and customer data is handled when you install and use the Aurabase companion app.

1. Information We Collect

When you install and authorize Aurabase, we access specific store information authorized via Shopify OAuth scopes, including:

• Shop details (domain, store ID, and contact email) to maintain active connection records.
• Product and variant catalog information to sync inventory across external workflows.
• Draft order identifiers generated during checkout interactions.

2. How We Use Information

The collected information is used strictly to provide, maintain, and optimize catalog synchronization and draft order creation for your store. We do not sell, rent, or monetize your store data or customer records.

3. Data Retention and Deletion (GDPR & Compliance)

We respect data privacy rights and honor all mandatory Shopify compliance webhooks (customers/data_request, customers/redact, and shop/redact). When a store uninstalls Aurabase or submits a redaction request through Shopify, all associated store credentials and synced identifiers are permanently removed from our active databases within 30 days.

4. Security

All communication between Shopify and our servers occurs over secure HTTPS connections with cryptographic HMAC signature verification to safeguard against unauthorized access.

5. Contact Us

If you have any questions about this Privacy Policy or data handling practices, please contact us at: support@email.aurabase-system.com