Shadow privacy policy

Last updated: 21 September 2026

Who operates Shadow

mbedded solutions, Bilal Seyyid Urgun, Ulubatlıhasan Mahallesi, Selimiye Sokak No: 3A, 42050 Karatay / Konya, Türkiye. Contact: info@bembedded.com.

Information processed

Shadow processes the shop domain, Shopify authorization information, report configuration, connection credentials, export history and subscription status. Depending on the reports selected by the merchant and access granted by Shopify, exports can contain product and inventory data, orders, line items, transactions, fulfillment information, customer identifiers, names, email addresses, phone numbers and billing or shipping addresses. Shadow does not request full payment card numbers.

Purpose and roles

We use this information to authenticate shops, generate and deliver requested exports, run schedules, prevent duplicate incremental exports, provide support, manage access to paid features and fulfill privacy requests. Merchants decide which customer data to export and where to send it. We process customer export data on the merchant’s instructions. We process our own service and support records to operate the service and meet applicable obligations. We do not sell customer data or use export contents for advertising.

Storage and recipients

Shadow is hosted on Hetzner infrastructure. Shopify provides authentication, billing and platform APIs. Files are sent to destinations selected by the merchant, such as FTPS/SFTP or email. Email may be delivered through Resend or the configured SMTP provider. Those providers process data under their own terms. Our operator is based in Türkiye; processing and merchant-selected destinations can involve international transfers. Merchants should select destinations appropriate for their data and contact us about required contractual arrangements.

Retention and deletion

Completed export files and completed or cancelled history are retained for 30 days. Failed or unresolved transfers remain until reconciliation. Report settings and incremental tracking are retained while needed to operate the merchant’s configured exports. Removing a report does not automatically remove files already in export history. Merchants can request deletion through support. After uninstall, scheduled delivery and feed access stop. On Shopify’s shop erasure notification, Shadow deletes that shop’s stored settings, history, export files and tracking records. Customer erasure notifications remove matching export files and records, and pause schedules for merchant review. Files created before customer indexing was available are removed conservatively. Recovery backups are restricted, expire within 30 days, and are not used to resume processing erased data without reapplying erasure requests.

Copies already delivered to an external destination are controlled by the merchant and the receiving provider. The merchant must handle deletion and access requests for those copies and review customer information entered into saved report configurations.

Access requests and your rights

Customers should first contact the store where they placed their order. Merchants can view Shopify privacy requests in Shadow’s Settings and use export history to fulfill access requests. Contact us for access, correction, deletion or other rights available under applicable law, or questions about international processing. We may need to verify authority before disclosing information. You may also contact your competent data protection authority.

Security and changes

Shopify authentication limits access by shop. Stored export files, report content, authorization tokens, connection credentials, privacy-request payloads and recovery backups are encrypted at rest. HTTPS protects the app connection. File delivery requires SFTP or FTPS; SMTP delivery requires TLS or STARTTLS. Access to customer exports is logged for security, with access records retained for 30 days. This policy may be updated as the service changes.