Privacy Policy

Effective date: 25 October 2026.

This policy explains what SBA Feed collects, why, and what your rights are. SBA Feed is operated by SBA Commerce Ltd, a UK company. Contact us at sbacommerceltd@gmail.com for anything in this policy.

What SBA Feed is

SBA Feed syncs a Shopify store's product catalogue to Google Merchant Center, so the merchant's products can appear in Google Shopping and Performance Max campaigns. The merchant connects a Shopify store and a Google Merchant Center account; the app moves product data between them and shows Google's diagnostics back to the merchant.

Data we collect

• Store catalogue data. Products, variants, prices, availability, and inventory from your Shopify store (through Shopify's read_products and read_inventory permissions), and product data from your Merchant Center account (through Google's Merchant API). This is the data the feed exists to move.
• Connection data. Your store domain, your Merchant Center account identifiers, and the access tokens that let the app call Shopify and Google on your behalf. Tokens are stored encrypted (AES-256-GCM) on our server and are never shown to anyone.
• Billing data. Your plan, subscription status and identifier, amounts paid, and promo code redemptions. Payments themselves are processed by Shopify; we never see or store your payment card details.
• Operational records. Sync logs, diagnostics snapshots, and webhook receipts (shop domain, topic, subscription identifier and status). These contain store and subscription information, not your customers' personal data.
• Support messages. Whatever you send us by email when you ask for help.

Data we do not collect

• Your passwords. We never ask for, collect, or store your Google or Shopify passwords. Sign-in happens on Google's and Shopify's own pages; we receive only an access token.
• Your customers' personal data. The feed syncs product catalogues, not customer lists. If a customer identifier ever appears inside a synced product field, our erasure process removes it when you ask (see below).
• Anything from your customers (shoppers). SBA Feed has no storefront component: it never loads on your customers' devices, drops no cookies on shoppers, and logs nothing about how shoppers visit your store.
• Payment card details. Billing runs through Shopify. Card data never touches our servers.

Why we process data, and the basis for it

We process your data to provide the service you asked for (running the sync, showing diagnostics, and billing through Shopify), to keep the service secure, and to support you. That is processing necessary for our contract with you, and in our legitimate interests in running and securing the service. Connecting a store or Merchant Center account is your choice, and disconnecting (uninstalling the app) ends that processing as described below.

Who we share data with

Only the services needed to run the feed: Shopify (to read your catalogue and bill your subscription) and Google (to submit products to Merchant Center). We do not sell your data, and we do not use it for advertising. Our servers are hosted by Hetzner in Germany. Support email runs through Gmail. No other third party receives your store data. If you are in the European Economic Area, note that support email is handled through Gmail, which may process data outside the EEA; your store and sync data itself stays on servers in Germany.

How long we keep data

While your store is connected. When you uninstall the app, your store record, connection tokens, and catalogue data are deleted. If you request erasure for a shop (Shopify's shop/redact request, or an email to us), we delete all data for that shop, including logs that mention it. Billing records needed for accounting may be kept in summary form after deletion.

Your rights

Under UK data protection law you have the right to access, correct, or erase your personal data, to restrict or object to its processing, and to port it elsewhere. To exercise any of these, email sbacommerceltd@gmail.com and tell us your store domain. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Cookies

SBA Feed runs inside your Shopify admin and uses only what is needed to keep you signed in to the app. We do not use advertising or tracking cookies, and we do not track you across other sites.

Changes to this policy

If we change this policy, we will post the new version here and update the effective date above. Material changes will also be flagged in the app.

Contact

SBA Commerce Ltd — sbacommerceltd@gmail.com.