Privacy Policy

Last updated: October 28, 2026

BootWhoo, LTD. ("FeedUnify", "we") provides the FeedUnify Shopify app. This policy explains what data the app processes when a merchant installs it, and why.

1. Data we access from Shopify

When you install FeedUnify, Shopify grants the app read-only access to:

• Products and inventory (titles, descriptions, variants, prices, SKUs, barcodes, images, stock levels and inventory policy) — to build product feeds and check them before they are sent.
• Markets, locales and translations — to build one feed per market with the right currency, language and URL.

FeedUnify does not request access to customers, orders, or checkout data, and does not store any personal data about your customers. The mandatory Shopify privacy webhooks (customers/data_request, customers/redact) are acknowledged; there is no customer data to report or erase.

We also store your shop domain, the shop owner email (to send sync alerts), your FeedUnify plan status as reported by Shopify, and an audit log of sync decisions you make in the app.

2. Data from Google, Meta and Microsoft (only if you connect them)

• Google Merchant Center — with your consent (OAuth scope https://www.googleapis.com/auth/content), we store access and refresh tokens to send your product data to the Merchant Center account you choose, and to read back product status.
• Meta — with your consent (Facebook Login for Business), we store an access token to send product data to the catalog you choose.
• Microsoft Advertising / Merchant Center — with your consent, we store access and refresh tokens and the store / account ids you enter, to send product data to that store.

FeedUnify's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use these tokens only to provide the feed features you turned on; we do not sell this data, use it for advertising, or let humans read it except for security investigations, legal compliance, or with your explicit permission for support.

3. How we protect data

• All traffic uses HTTPS.
• Shopify, Google, Meta and Microsoft tokens are encrypted at rest (AES-256-GCM envelope encryption); the encryption key is held only in our hosting provider's secret store.
• Product data is sent only after you confirm a push in the app.

4. Retention and deletion

• Uninstall: sync stops immediately and your Shopify session is deleted. 48 hours later Shopify sends a shop/redact request and we delete all data we hold for your shop (feed snapshots, settings, connections, tokens, audit logs).
• Disconnecting Google / Meta / Microsoft in the app deletes the stored tokens for that channel (Google tokens are also revoked at Google).
• You can ask us to delete your data at any time: support@feedunify.com.

5. Sub-processors

6. Contact

BootWhoo, LTD. — support@feedunify.com. EU / UK merchants: support@feedunify.com.