Privacy Policy

What this service does

recordstore.tech keeps a record seller’s Discogs inventory and their Shopify store in sync. To do that, it needs access to both platforms on your behalf. This policy describes exactly what we store, why, and for how long.

Data we store

• Account: your email address (used for passwordless sign-in codes and service notifications).
• Platform access: your Shopify store domain and access token, and your Discogs OAuth tokens and username. These exist solely so the sync can read and write on your behalf.
• Inventory data: the listings and products being synced (titles, prices, quantities, condition grades, pairing ids) and periodic snapshots of them.
• Order mirrors: for Discogs orders imported into Shopify we store the Discogs order id, status, totals and the buyer’s Discogs username.
• Billing: your Stripe customer and subscription ids. Card details never touch our servers; they go directly to Stripe.

We run no advertising, no tracking or analytics cookies, and we do not sell or share your data for marketing. The only cookies are essential: your sign-in session and the active-shop context.

Who processes it

Your data is processed by the infrastructure providers the service runs on: Vercel (hosting), Neon (database), Upstash (Redis), Stripe (payments) and Resend (transactional email), plus the Shopify and Discogs APIs acting on your instructions. Each processes data only to provide their part of the service.

How long we keep it

• Platform credentials are kept only while the platform is connected. Disconnecting Discogs, disconnecting the store or uninstalling the app deletes the stored credentials immediately.
• Sync data (pairings, snapshots, history, order mirrors) is kept so a reconnection can resume where it left off, and deleted on request.
• Billing records are kept as long as legally required for accounting.

Your rights

You can request access to, correction of, or deletion of your data at any time via the Feedback form in the app footer. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

Changes

If this policy changes materially, we’ll note it in the changelog and update the date above.