RATEX Bulk Manager

1. Overview & Commitment to Privacy

RATEX Bulk Manager ("we", "our", or "the App") is built specifically for Shopify merchants to manage products, variants, and inventory efficiently. We are deeply committed to protecting merchant and customer privacy. This Privacy Policy explains what data we access, how it is used, and how it is safeguarded in strict accordance with the Shopify Partner Program Agreement and Shopify App Store Requirements.

2. Data We Collect & Access

The App accesses only the minimum necessary store information required to provide bulk management services, using official Shopify Admin GraphQL APIs:

• Shop Identification: Store domain, shop ID, and offline access token used exclusively to authenticate API calls on behalf of the store.
• Product & Variant Data: Product titles, descriptions, tags, vendor, product types, variant options, prices, compare-at prices, barcodes, and SKUs to perform requested bulk updates.
• Inventory & Location Data: Inventory item IDs, location IDs, and available stock quantities to adjust stock across store fulfillment centers upon merchant request.

No End-Consumer Personal Data: We do NOT collect, store, or sell buyer personal data (such as customer names, physical addresses, payment credentials, or phone numbers).

3. Authentication & Cookie-Free Operation

The App utilizes Shopify App Bridge and session token authentication. We do not rely on third-party tracking cookies or store sensitive merchant session data on the client device. The App operates safely inside modern privacy-conscious browser modes, including Google Chrome Incognito mode and Safari ITP.

4. Data Retention & Deletion (GDPR & CCPA Compliance)

We adhere to strict data minimization principles:

• App Uninstallation: When a merchant uninstalls the App, Shopify triggers an app/uninstalled webhook. Upon receipt, all store sessions, configured rules, and execution logs are permanently deleted from our database.
• Mandatory GDPR Webhooks: We actively support and respond to Shopify mandatory privacy webhooks:
  • customers/data_request: Confirmation of zero stored customer PII.
  • customers/redact: Immediate verification that no customer records exist.
  • shop/redact: Automated deletion of any historical store metadata within 48 hours.
• Activity History Retention: Bulk operation history records are automatically purged according to the merchant's subscribed tier (7 days on Free, 90 days on Pro, 365 days on Advanced).

5. Security & Third-Party Services

Our servers and databases are hosted in enterprise-grade cloud environments with TLS 1.3 encryption in transit and AES-256 encryption at rest. We never sell, rent, or trade merchant or store data to third-party advertisers or data brokers.

6. Contact & Privacy Requests

If you have questions regarding this Privacy Policy, wish to request data deletion, or have security inquiries, please contact our dedicated privacy team:

Email: support@ratex.tech
Application URL: https://bulk.ratex.tech