Privacy Policy — Loitsu Software

1. Overview & Identity

This Privacy Policy describes how Loitsu Software (“we”, “our”, or “us”, operated by Loitsulafka Oy, Business ID: FI34400272, Helsinki, Finland) handles data across our applications and web services distributed via the Shopify App Store.

2. Data We Collect & Store

We only store the bare minimum technical configuration required to authenticate and provide application functionality:

Shopify Merchant & Session Identifiers: Store domain (e.g. store.myshopify.com), API access tokens, and basic authenticated staff session metadata (such as user ID or email provided by Shopify OAuth for session authentication).
Application Configuration Rules: Product variant identifiers (Shopify GraphQL IDs), rule titles, unit ratios, and merchant configuration preferences.
Activity & Audit Logs: Breakdown and packaging action history, timestamps, quantities adjusted, product variant titles, and inventory location identifiers to provide in-app inventory audit trails.

3. Data We Do NOT Collect

Our systems are engineered to operate without accessing or storing merchant end-customer data:

Zero Customer PII: We do not collect, store, or process names, email addresses, shipping addresses, phone numbers, or IP addresses of your store’s customers.
Zero Order Data: We do not track, process, or store customer orders or payment details.
No Inventory Mirroring: Inventory levels are fetched in real-time from Shopify via GraphQL and are never permanently stored in our database.

4. Data Retention & GDPR Compliance

We strictly adhere to the General Data Protection Regulation (GDPR) and Shopify’s mandatory compliance standards:

App Uninstallation: When an application is uninstalled from your store, all stored access tokens, session records, configuration rules, and activity audit logs associated with your shop are immediately and permanently deleted.
Mandatory GDPR Webhooks: We fully implement and respond to Shopify’s mandatory privacy webhooks (customers/data_request, customers/redact, and shop/redact).

5. Security & Third Parties

All data in transit is encrypted using modern TLS (HTTPS). We do not sell, rent, or monetize any merchant data, nor do we share it with third-party advertising networks or data brokers.