Kumiko Bundle Price Sync (the "App") is an app for businesses that operate Shopify stores ("Merchants"). This Privacy Policy describes how the provider of the App handles Merchant information.
With respect to information about Merchants, the provider of the App determines the purposes and means of processing on its own. With respect to the personal data of shoppers (end customers), the provider does not act as a processor on behalf of the Merchant (§2).
⚠️ This Policy is separate from the privacy policy that a Merchant displays to the shoppers of its own store.
The App obtains and stores the following information from Shopify.
PrismaSessionStorage)We may also obtain the following information from sources other than Shopify.
The permissions (access scopes) the App requests from Shopify are
reading and writing product information
(read_products / write_products)
only.
We neither store nor use any information about the store's shoppers (end customers). Because the App does not request the permissions to read orders, customers, or email addresses in the first place (§1), it never obtains such information from Shopify.
Notices that Shopify sends for legal compliance, such as deletion requests, may contain shopper identifiers. The App does not store them, does not write them to logs, and discards them after responding (§4, §7).
The session records managed by Shopify's official library contain, by design, fields that could hold the name and email address of store staff. Because the App is configured to use offline access tokens only, these fields are not used and no values are stored in them.
We use the information we obtain only for the following purposes.
We do not use the information for any other purpose. We do not use it for advertising, profiling, or as training data for machine learning.
| Data | Retention |
|---|---|
| Price update history | 30 / 180 / 365 days depending on your plan; older entries are deleted automatically. Before subscribing (before the trial starts) the retention period is 90 days; after cancellation, the retention period of the plan at the time of cancellation continues to apply |
| Internal job records | Deleted by a daily process once more than 24 hours have passed since they expired |
| Price cache no longer referenced | Deleted after a 30-day grace period |
| Bundle composition and settings | While the App is installed |
| Server logs | 30 days. Logs may contain the store domain, product and variant IDs, and prices. Access tokens and authentication values are redacted before being written to logs |
| Backups | A copy of the database is made daily and automatically deleted after at most 14 days. If we restore from a backup after an incident, data deleted up to that point may temporarily reappear, but the deletion processes in this §4 are applied again and deletion within 30 days of uninstallation is maintained |
shop/redact) from Shopify — we delete all data of
that store. After deletion, copies remaining in backups are also erased
within the period above (at most 14 days), after which the data cannot
be restored.customers/data_request / customers/redact),
as described in §2 we hold no such data, so there is nothing to return
and nothing to delete (we only acknowledge receipt to Shopify).| Provider | Satoshi Nobutsugu |
| Address | 8-20 Miyoshino-cho, Yahatanishi-ku, Kitakyushu, Fukuoka 807-0865, Japan |
| Contact | kumiko.support@gmail.com |
The provider of the App, as a business handling personal information under Japan's Act on the Protection of Personal Information, accepts inquiries and complaints regarding this Policy and the information we obtain at the contact point above.
As security control measures under the Act on the Protection of Personal Information, we have implemented the following.
Details of other measures are not disclosed because disclosure could impair security.
| Request | Response |
|---|---|
| Delete my data | Uninstall the App. Upon the deletion request from Shopify (normally 48 hours later), we delete all data of your store (§4) |
| Requests about shoppers (end customers) | We hold no such data, so there is nothing to return and nothing to delete. We only acknowledge receipt to Shopify (§2) |
| Disclosure of stored data, or any other request | Contact us at the address in §6. What we store is described in §1 |
Requests for disclosure, correction, suspension of use, and the like are accepted at the contact point in §6. To verify your identity, we may ask you to contact us from an address associated with an administrator of the store concerned. No fee is charged.
There is no deletion control within the App's screens. Deletion is handled exclusively through the Shopify path described above.
The App's data is stored in the Tokyo region
(ap-northeast-1, within Japan) of Amazon Web
Services (AWS). Backups are stored in the same region. We do not
transfer personal information outside Japan.
We use a notification feature in an AWS region in the United States for server availability monitoring; the only information sent there is whether the server is responding, and it contains no Merchant information.
Although AWS is headquartered in the United States, as noted above the data is stored within Japan, and this does not constitute provision to a third party in a foreign country.
The App does not set cookies. Nor does it store information in the Merchant's browser through technologies similar to cookies, such as local storage or session storage.
The App's screens run embedded inside the Shopify admin, and Merchants are authenticated using session tokens issued by Shopify (short-lived signed tokens attached to each request). These tokens are not stored in the browser.
Cookies set by the Shopify admin (admin.shopify.com)
while the App's screens are displayed belong to Shopify itself; the
provider of the App neither receives nor can read them. For their
handling, please refer to Shopify's privacy policy.
Accordingly, the App does not use cookies for analytics or advertising purposes either (§3, §5).
For Merchants in the EU/EEA and the United Kingdom, the following applies in addition to the above.
Where required by law, or upon a lawful request from a court, administrative authority, or other public body, we may disclose information to the extent necessary.
When we change this Policy, we will post the revised content on the page where this Policy is published and update the "Last updated" date. For material changes, we will also notify you within the App.
This Policy is prepared in Japanese and English. In the event of any discrepancy between the two, the Japanese version shall prevail.