Privacy policy

USMIH Ltd. operates UVAON Daily App. This policy describes the data used to provide its Shopify features. Merchants control their store settings and customer relationships.

USMIH Ltd.
str. Sofia 65a, 1225 Sofia, Bulgaria
VAT number: BG207299888
info@seoexpert.bg

Data used by the app

• Account and settings: shop domain, Shopify authorization tokens, granted permissions, staff identity and language, module settings, design preferences, translations and submitted feedback.
• Catalog and ordering: products, variants, prices, inventory, locations and publication status. Customer tags and company assignments are read when needed to authorize access and obtain contextual Shopify pricing. Bulk Editor stores the selected changes, before-and-after values, job history and the staff reference responsible for a job. Price campaigns also store their approved schedule, the owner’s authorization reference and verified values needed to restore the affected prices.
• Catalog Health: selected checks, scan status, product and variant references, titles, handles, normalized SKU observations and limited evidence for reported findings. Descriptions are checked without storing their full content.
• Wishlist: saved product and variant IDs, quantities, notes, priorities and timestamps. Signed-in lists use a pseudonymous owner key and an encrypted Shopify customer ID; company lists also use company and location IDs.
• Optional Personal Wishlist sharing: an authenticated owner can select items and create a read-only link. Anyone with the link can view the selected items’ current public product and variant titles, available images, availability and product links. The shared view excludes prices, quantities, notes, priorities, owner or list names, contacts and Company information. We store a shop-bound digest of the link secret and references to the selected source items, not the raw secret. Links expire within seven days and stop earlier if replaced or revoked, or if the merchant turns sharing off. Removing a source item removes it from the shared selection. Turning sharing back on does not restore older links.
• Bundles & Cross-sell: the merchant’s chosen products and collections, offer names, language and appearance settings. Private cart line properties identify the offer and a random add attempt so the widget can confirm the result; they are not used for cross-session tracking.
• Back in Stock: an encrypted email address, a shop-specific email hash, selected product and variant, language, consent record, unsubscribe token hash and delivery status.
• Analytics and purchase notifications: pseudonymous order references, quantities, currency, attributed amounts and processing timestamps for Analytics; product references and a paid timestamp for recent-purchase notifications. These new records do not contain buyer names, emails, addresses or readable order IDs. When Bundle order reporting is enabled, it stores a shop-specific hashed order reference, offer references, retained quantities, refund and cancellation flags and source timestamps. This report does not store customer details, product references, cart attempt identifiers or monetary amounts.
• Order processing reliability: a temporary encrypted Shopify order reference, shop-specific hashed order and delivery references, installation identity, event type, processing status and timestamps support selected Analytics and purchase notifications. Processing jobs do not retain raw webhook payloads, customer contact details or freeform order attributes.
• Privacy requests: hashed matching references, request status and operational timestamps used to provide exports and perform deletion.

Purpose and browser storage

We use this data to operate the features selected by the merchant, authenticate users, enforce access and plan limits, deliver requested restock emails, prevent abuse, resolve support issues and process privacy requests. The app does not sell personal data or use it for third-party advertising.

Guest Wishlists and unfinished quick-order selections are stored in the shopper’s browser. If enabled, guest Wishlist items can be merged into the customer’s signed-in list. Promotion widgets use session storage to remember displayed or dismissed cards. Prices and availability are refreshed from Shopify.

The public website also uses session storage to restore page scroll positions as visitors navigate between its pages.

Retention

• Settings, active Wishlists, bundle offers, stock-planning rules, session records and operational visibility records remain while needed for the installed app, or until removed by the relevant deletion flow.
• Access requests to expired, revoked or disabled sharing links are denied without waiting for cleanup. Scheduled cleanup clears expired sharing metadata and selected references, and those invalidated when the merchant turns sharing off, in bounded batches. Expiry does not promise physical deletion within seven days.
• Completed Bulk Editor history is eligible for deletion after 90 days. Records needed by an active restore job remain until that job is finished.
• Price campaign snapshots are eligible for deletion 90 days after a campaign settles. Unresolved writes and prices still awaiting recovery are retained so that their outcome can be reviewed and recovery can be attempted. Uninstalling the app removes these records through the uninstall deletion process.
• Catalog Health reports are eligible for deletion after 90 days once their scan has finished or remains paused. Temporary SKU observations are removed when a scan completes, or with its expired report. Check preferences remain while the app is installed.
• Restock subscriptions expire after 180 days. Associated delivery records are removed during cleanup once any in-progress send has settled.
• Analytics defaults to 365 days. Product-feedback records default to 30 days. Deployment settings can change either period within a range of 30 to 730 days. The same Analytics retention applies to Bundle order reporting.
• Encrypted order-processing references are cleared when a job finishes and are eligible for removal at the next cleanup after 24 hours from receipt. Jobs cannot process after that 24-hour window. Hashed references and minimal processing metadata used to prevent duplicate work are eligible for deletion seven days after receipt. Matching customer-order privacy requests include minimized job metadata and remove matching jobs during redaction; shop deletion and uninstall remove the shop’s processing jobs and installation identity.
• Recent-purchase proof and cancellation or refund suppression records are retained for 30 days. Purchase cards are eligible for display for no more than 24 hours.
• Customer-data export references expire after 30 days; request audit records are kept for up to 730 days. Completed Wishlist request records are removed after 90 days.

Scheduled cleanup removes expired records in batches. Uninstall and verified shop-redaction events trigger deletion of app-owned records for that store. Render’s database recovery data, created logical exports and service logs remain subject to the separate provider periods below.

Manual privacy/support case metadata is kept while needed to handle and document the case or meet applicable legal obligations. Before the first case is recorded, management documents purpose-based retention criteria, any legal retention need and deletion-review responsibility. App uninstall does not automatically delete this separate register. Removing a row from Google Sheets does not immediately remove its prior contents from version history; file-level deletion may be needed, and Google recovery and deletion periods can still apply. Under USMIH's applicable Google Cloud Data Processing Addendum, once Customer Data is deleted so that USMIH cannot recover it, Google deletes the relevant data from its systems as soon as reasonably practicable and within a maximum of 180 days, unless European law requires storage. This provider period does not begin merely by deleting a Sheet row and is not the retention period for active case records.

Service providers and protection

Shopify supplies the commerce and authentication services used by the app. The application and PostgreSQL database run on Render in Frankfurt, Germany. Under the current Render Pro workspace plan, PostgreSQL point-in-time recovery covers the previous seven days, created logical exports are retained for at least seven days, and service logs for 14 days. Render’s data processing terms allow processing and transfers to the United States.

When Back in Stock email delivery is enabled, the recipient address and message content are sent to Resend. The verified sending domain uses Resend’s Ireland region for sending; Resend stores message content, delivery logs, webhook payloads and account records in the United States. Under the current Resend Free plan, email and log data is retained for 30 days and backups for seven days. After account termination, Resend deletes remaining customer data within 90 days.

USMIH uses its firm Google Workspace account for a restricted manual privacy/support case register in Google Sheets/Drive. It contains only case IDs, shop references, request type and status, operational dates, action references and restricted evidence references. We do not upload raw merchant/customer exports, app event payloads or credentials to this register. Access is restricted to management and authorized personnel. Google may store and process these records internationally under USMIH's applicable Cloud Data Processing Addendum and its transfer safeguards; Business Starter does not give this register a selected EU data-region commitment. Google's Workspace subprocessor list describes its onward providers. Google encrypts Drive/Sheets files in transit and at rest under its standard service protection.

The application restricts records by store and checks authorization for protected actions. It encrypts stored Wishlist customer IDs and restock email addresses at the field level.

Access, correction and deletion

Customers should contact the merchant operating their Shopify store to verify a request. The app accepts Shopify privacy webhooks and provides matching exports to authorized store administrators. An export supplied to the merchant’s browser does not prove that it reached the customer; the merchant remains responsible for verified delivery. Redaction requests queue removal of matching app-held records.

Merchants can contact info@seoexpert.bg for assistance. Do not email passwords, access tokens or an unrequested customer export. Restock recipients can also use the unsubscribe link in their email to stop further notifications for that request.

Updates

We will update this policy when the app’s processing or service providers change. The date above identifies this version.