SellWide · privacy

Privacy Policy

Last updated 11 September 2026

SellWide is a marketplace sync app for Shopify stores: it publishes your products to marketplaces such as eBay, keeps listings, stock and orders in step, and shows you what is happening. Doing that job means handling some information about your store and, briefly, about your customers.

This page sets out exactly what is read, what is stored, what is deliberately not collected, and how to have it removed. It describes what the software actually does — it is written from the app's own data inventory, not from a template.

Plain summary. We read the Shopify data needed to list products and import marketplace orders. We store your settings, the listings we manage, and the tokens needed to talk to Shopify and your marketplace — tokens encrypted. We do not keep customer records. We do not use cookies or track your shoppers. We never sell data or use it to train AI models. You can have everything deleted at any time.

1Who is responsible for what

SellWide is operated from New South Wales, Australia. We publish the region rather than a street address, and we do not claim a company registration we do not hold — the email address in section 13 is how to reach us about anything on this page.

For your customers' personal information, you are the data controller and SellWide is a data processor acting on your instructions. We process it only to deliver the service you have configured, and for no independent purpose of our own. For your own account information (store domain, settings, billing), you are our customer and we are the controller.

2What we read from Shopify

SellWide requests the following access scopes. Each one is used for the reason given:

Scope	Why it is needed
`read_products`	Read the products, variants, images and SKUs to be listed on a marketplace.
`read_orders`	Read a Shopify order so the marketplace can be told what has shipped from it, and so a marketplace cancellation is applied to the right order. (The same order is never imported twice — that is decided by the marketplace's own order number, kept in SellWide's records, not by reading your order list.)
`write_orders`	Create an order in Shopify when a marketplace order is imported, so it appears in your admin like any other order — and cancel it if the buyer cancels on the marketplace and you have asked SellWide to do that for you.
`read_customers`	Requested alongside `write_customers`, because creating an imported order links it to the buyer's customer record. SellWide does not read, list or search your customer records itself.
`write_customers`	When an imported marketplace order is created, Shopify links it to the buyer's customer record — creating one if there is not already a matching customer — and that needs this scope. Creating the order is the only reason SellWide touches a customer record. It never updates an existing customer: the order carries the buyer's email and nothing else, so SellWide cannot overwrite a name or any other detail you already hold.
`read_inventory`	Read stock levels so listing quantities can follow your real stock.
`read_locations`	Requested with `read_inventory` as part of reading stock. SellWide reads stock quantities at the variant level and does not read your location details.
`read_fulfillments`	Track fulfilment state, so tracking details can be pushed back to the marketplace.

3What we read from your marketplace account

To list anything on a marketplace, that marketplace requires the listing to reference your own seller settings. Rather than asking you to find and type identifiers, SellWide reads them from your marketplace account using the authorisation you gave when you connected it:

Business policies — your payment, returns and postage policies, with their names and identifiers.
Postage locations — the locations you have registered as ship-from addresses, with their names and whether each is enabled.
Your seller order and listing data, as far as the scopes you granted allow — orders placed with you, so they can be imported, and listing state, so your own listings can be tracked and updated.

This is read-only with respect to your marketplace settings: SellWide does not create or edit business policies or postage locations. The policy and location identifiers you choose are stored as part of your settings (section 4); the lists themselves are read when you open the app's settings and shown to you, and are not kept.

4What we store

Everything SellWide keeps lives in one AWS database in the Sydney region, in rows partitioned per store:

Stored	Detail
Store identity	Your `myshopify.com` domain and an internal tenant identifier derived from it.
Access tokens	The Shopify access and refresh tokens, and the webhook signing secret. All are encrypted (AES-256-GCM) before storage and decrypted only in memory when needed.
Your settings	Marketplace connection, listing rules, category mappings, business-policy IDs, listing title length, SKU prefix, and your imported-order settings.
Listings we manage	Per SKU and marketplace: the offer and listing identifiers, so we update the listing we created rather than creating a second one.
Sync job records	What work was done, its outcome, and any error text, so failures are visible and retryable. Errors can contain product titles or SKUs; they do not contain customer data.
Proposed changes	In Approval mode, the listing changes awaiting your decision, and your decision on them.
Which order came from where	For every order imported from a marketplace: the marketplace's order identifier and the Shopify order it became, in both directions. This is how a shipment is reported back to the right order, and how a cancellation on the marketplace finds the order it refers to. It contains order identifiers only — no buyer details, no addresses, no items.
Marketplace cancellations	When a marketplace order is cancelled, we record the marketplace's order identifier, the cancellation reason the marketplace reported, and when it happened — so you are told once, and can act on it. Deleted with everything else when the app is uninstalled and the redaction request arrives.
Your plan	Which plan you are on, whether the subscription is active, and your usage counters (how many listings and marketplaces are connected). Payment is handled entirely by Shopify; no card or bank details reach us.

5What we deliberately do not collect

No customer records. When a marketplace order is imported, the buyer's name, email and delivery address are read from the marketplace, used to create the order in Shopify, and then discarded. The only thing that remains is the marketplace's own order identifier, which is used as an idempotency key so a repeated webhook does not import the same order twice. That identifier is not personal data in our hands, and it is deleted with everything else.
No shopper tracking. SellWide installs nothing on your storefront. It sets no cookies and runs no analytics, pixels or tags in front of your customers.
No customer payment data. Card details never reach us: payments happen inside Shopify and inside the marketplace. SellWide never issues a refund — a buyer's refund is the marketplace's to make, because the money never came through Shopify.
No profiling. We do not build profiles of you or your customers, and we do not sell, rent or share personal information with advertisers or data brokers.
No AI training. Your data is not used to train machine-learning models.

6Automated logs

SellWide writes operational logs so a failure can be diagnosed: which event arrived, which marketplace it was for, what the outcome was, and error messages. Logs are configured to exclude secrets — access tokens, signing secrets, customer identifiers and full request payloads are never written to them, and log entries are retained for a short operational window in AWS CloudWatch.

7How we use it, and on what basis

To provide the service you installed and configured — publishing, revising and ending listings, syncing stock, importing orders, pushing tracking back.
To keep it working — retrying failures, showing you status and errors, preventing duplicate work.
To support you when you contact us.

For the categories and purposes in this table, the legal bases are performance of our contract with you (providing the service) and our legitimate interest in keeping it reliable and secure. Where you process your customers' data through SellWide, you rely on your own lawful basis for that processing.

8How long we keep it

Store data is kept for as long as the app is installed and you are using it. When you uninstall, your access tokens are deleted immediately and any work still queued for your store is stopped — so SellWide cannot act for you, or read anything, the moment it is removed. The rest of the store's data (settings, listing records, order links, plan state) is deleted when Shopify sends the mandatory redaction request for your store, which it does shortly after an uninstall; that request is answered automatically and the deletion is confirmed rather than assumed. You can ask us to delete everything earlier, at any time, by writing to us at the contact details in section 13. Marketplace listings that were published remain on the marketplace under your own seller account — uninstalling SellWide does not end them, and we tell you that rather than leaving you to discover it.

9Where it lives

SellWide runs entirely on Amazon Web Services in the Sydney (ap-southeast-2) region. Data is stored there and is not moved to another region by us. AWS is our hosting sub-processor, and the marketplaces you connect (for example eBay) receive the listing and order information necessary to operate — under their own terms and privacy policies.

SellWide is not established in the European Union. If you are established in the EU or UK, your data is transferred to and processed in Australia, which we rely on your instructions to do. We are happy to put a data processing agreement in place on request.

10Your rights

You can ask us to access, correct, export or delete the information we hold about you, and you can object to or restrict certain processing. Contact hello@sellwide.app and we will respond within 30 days.

SellWide answers Shopify's mandatory privacy webhooks so requests that reach us through Shopify are acted on:

Customer data request — we return what we hold for that customer: nothing, because customer records are not retained. We say so rather than producing a report we cannot substantiate.
Customer redaction — acknowledged and completed.
Shop redaction — every stored row for that store is deleted: tokens, settings, listings, jobs and proposals.

11Security

Access and refresh tokens and the webhook signing secret are encrypted with AES-256-GCM using a key held in AWS Systems Manager Parameter Store, and are decrypted only in memory for the request that needs them. Every webhook from Shopify and every callback is signature-verified before it is acted on, and a request that fails verification is rejected. Each store's data is isolated by design: every database row is keyed by the store it belongs to, so one store's data cannot be read in the context of another.

12Cookies

SellWide's marketing site uses no cookies and no analytics. The app runs inside the Shopify admin and relies on Shopify's own session; it sets no cookies of its own and does not track you across sites.

13Changes and contact

If this policy changes in a way that affects how your data is handled, we will update this page and note the date at the top. Questions, requests and complaints: hello@sellwide.app.

Our region is New South Wales, Australia, which is also the jurisdiction our terms name. Write to the email address first and we will give you anything further a formal notice needs — we would rather hear from you than have you escalate, and we will always tell you plainly what we can and cannot do.