Privacy policy
FeedPlug processes only the data strictly required to synchronise your product catalog with marketing channels (Google Shopping, Microsoft Bing, Amazon Seller). We never access customer-level data of your Shopify store.
1. Data controller
The data controller is FeedPlug (Agence Inconnu), operating the FeedPlug service, registered office: France. Contact: support@feedplug.com.
2. Data accessed from your Shopify store
FeedPlug uses the minimum Shopify Admin API scope required to sync product feeds. We do NOT request, access or store customer data, orders, payment information or marketing analytics from your Shopify store.
| Shopify scope requested | Purpose |
|---|---|
read_products | Read your product catalog (titles, descriptions, images, variants, prices, inventory, SEO fields) to build the feed sent to Google Shopping, Microsoft Bing and Amazon. |
Shop-level metadata also stored: myshopify domain, shop name, billing email (used only to identify the account), currency code.
3. Google user data (OAuth connections)
When you connect a Google account to FeedPlug (Google Merchant Center or Google Ads), we access the following data through Google APIs, with your explicit consent on the Google authorization screen:
| Google data | Purpose |
|---|---|
| Email address of the connected Google account | Display which Google account is linked to your FeedPlug workspace. |
| Merchant Center accounts list and identifiers (Content API for Shopping) | Let you pick the destination account, then create and update your product offers in Google Merchant Center. |
| Google Ads shopping performance metrics (read-only) | Display impressions, clicks, cost and revenue per product inside your FeedPlug performance dashboard. |
- OAuth refresh tokens are encrypted at the application level (AES-256-GCM) before storage and are never exposed to third parties.
- Google user data is never sold, never used for advertising, never used to train AI models, and never read by humans except with your explicit permission for support purposes.
- Disconnecting Google from FeedPlug (or deleting your account) immediately revokes and deletes the stored tokens.
FeedPlug's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Processing purposes
- Build, validate and continuously sync product feeds with Google Merchant Center, Microsoft Bing Shopping and Amazon Seller catalogs.
- Optimise product titles and generate ad-friendly images (Pack IA add-on, opt-in).
- Run quality diagnostics on the catalog (missing GTIN, broken images, policy violations) and surface fixes inside the app.
- Bill the subscription (via Shopify Billing API or Stripe depending on signup channel).
- Support and incident communication tied to the active subscription.
5. Legal basis
- Performance of the contract (provision of the FeedPlug service).
- Legitimate interest (security monitoring, fraud prevention, abuse rate-limits).
- Consent (Pack IA optimisations, marketing emails).
6. Hosting & security
All data is hosted on Google Cloud Platform in the europe-west1 region (Saint-Ghislain, Belgium). PostgreSQL data is encrypted at rest, all traffic uses TLS 1.2+ in transit.
- Application secrets (Shopify access tokens, API keys, JWT secrets) stored in GCP Secret Manager, never in code.
- Sensitive fields encrypted at the application level (AES-256-GCM) before persistence.
- Daily PostgreSQL backups retained for 7 days.
- Strict access control: only FeedPlug staff with operational need can access production data, with audit trail.
7. Shopify GDPR webhooks
FeedPlug implements all three mandatory Shopify GDPR webhooks. Because we never collect customer data from Shopify stores, the customers-related webhooks are mostly acknowledgments:
| Webhook | Behavior | SLA |
|---|---|---|
customers/data_request | Acknowledged + logged for audit. No customer data is held to return. | 30 days |
customers/redact | Acknowledged + logged. No customer data to delete. | 30 days |
shop/redact | Full cascade deletion: FeedItem → Feed → FeedSource → Credential for the shop, plus orphan Account cleanup. | 48 hours |
8. Subprocessors
FeedPlug relies on the following subprocessors:
| Subprocessor | Role | Location |
|---|---|---|
| Google Cloud Platform | Hosting, database, secret manager, storage | EU (Belgium) |
| Shopify | Admin API + Managed Pricing billing | CA / US |
| Stripe | Billing for non-Shopify signups (feedplug.com) | US (EU subprocessor) |
| Google Merchant Center / Microsoft Bing / Amazon Seller | Destination channels (your product data is sent there per your activation choice) | US |
| Resend | Transactional email (welcome, billing notices, alerts) | US |
| Sentry | Error monitoring (no PII captured) | US / EU |
Data Processing Agreements signed with each subprocessor (SCC where applicable).
9. Retention
- Active subscription: data retained as long as the subscription is active.
- App uninstall: a 48-hour grace window before the shop/redact webhook triggers a full cascade deletion.
- Account cancellation (non-Shopify): data deleted within 30 days of cancellation, except billing records retained 10 years for tax compliance.
- Backups: rotated automatically, last backup containing your data deleted within 7 days.
10. Your rights
Under GDPR you can request access, rectification, erasure, portability, restriction, or object to specific processing. You can also lodge a complaint with your supervisory authority (CNIL in France).
To exercise your rights, contact us at support@feedplug.com. We respond within 30 days.
11. Cookies
FeedPlug uses strictly necessary cookies (session, CSRF) and a minimal analytics cookie aggregated and anonymised. No third-party advertising cookies are set. Details: Cookie policy.
12. Changes to this policy
We may update this policy to reflect changes in our service, subprocessors or legal obligations. Material changes are notified by email to active merchants at least 30 days before they take effect.
13. Contact
support@feedplug.com — general support: support@feedplug.com