Privacy Policy

Aegis Tech, based in Nairobi, Kenya (“we”), operates Aegis Bulk, an app that helps Shopify merchants keep product stock, prices and costs in line with their suppliers' files. This policy explains what we store, why, and how to have it deleted.

Whose data is whose. The supplier and product data you give us belongs to you. We process it on your behalf, only to provide the service. For your account details, we decide how they are used, as described below.

What we collect

• Your account: your name and email address. Your password is stored only as a salted hash, never in readable form. Optionally, a profile photo you upload.
• Your Shopify store: the store address and name, the permissions granted, and an access token that Shopify gives us. The token is stored encrypted.
• Supplier files and product data: files you upload or link to, and the product details in them (SKUs, titles, descriptions, categories, costs, prices, stock levels, image links). We also keep product and stock details we read from, and send to, your Shopify store.
• Activity records: your sync history, the changes Aegis detected and what you decided, alerts, and your settings, rules and schedules (including the file links you give us).
• Sign-in records: when you signed in and a short description of the browser or device, so you can see and end your sessions.
• Notification email (optional): if you switch on email alerts, the address you give us. We email it only after you confirm it with a link, and only the alerts you choose. Queued emails are deleted after 30 days.
• Waitlist: if you join our waitlist, your email address.
• Your plan: which plan you are on. We do not currently take payments or store payment details.

What we do not collect

Aegis Bulk asks Shopify only for permission to read and edit products and inventory, and to read store locations. We do not ask for, read or store your customers' or orders' personal information. Shopify's install screen also lists store-owner contact details as part of its standard permissions; Aegis Bulk does not read or store them.

How we use it

Only to run the service: to compare your supplier files with your catalog, show you changes, and send the changes you approve (or your rules allow) to your Shopify store; to keep your account secure; and to contact you about the service or the waitlist. We do not sell your data, use it for advertising, or build profiles for third parties.

Artificial intelligence

Aegis Bulk does not currently send your supplier files or product data to any artificial-intelligence or machine-learning provider. Matching columns to fields, detecting changes and applying your rules are done by rule-based code running on our own servers. If we add an AI provider in future, we will update this policy before any of your data is sent to it, and will say what is sent, why, who the provider is, and whether it stores the data or uses it to train models.

Who we share it with

• Shopify, because you ask us to read and update your store.
• Infrastructure providers (hosting, database, email delivery) that process data for us under their own security obligations. To complete before launch: name each provider here
• Authorities, if the law requires it.

Where your data is processed

We are based in Kenya, and the Kenya Data Protection Act, 2019 applies to how we handle the personal data of people in Kenya. Our servers and providers may be located outside Kenya and outside your country, so your data may be transferred across borders. We will use providers that protect it appropriately. To complete before launch: state the hosting region

Cookies and browser storage

We use one essential cookie to keep you signed in. Your browser also stores a small flag so the welcome animation is not repeated. We do not use advertising or analytics cookies at this time.

How long we keep it

• Account, supplier and product data: until you delete your account or Shopify tells us to erase your shop's data (see below).
• Sync history and alerts: removed automatically once older than the period you choose in Settings. That period cannot be longer than your plan allows (30 days on Free, 1 year on Growth, no limit on Pro). Each supplier's newest sync and anything waiting for your review are always kept. The clean-up runs after each sync.
• Supplier file contents: for each supplier we keep the full contents of its three most recent files so changes can be compared. Older files keep only their name, size and date. Original spreadsheet files are discarded as soon as an import is complete.
• Suppliers you remove: they disappear from your catalog and stop syncing, but their records are kept until you delete your account or your shop's data is erased.
• Sign-in sessions: end after 30 days, or when you sign out or end them in Settings.
• Deletion records: when we erase a shop's data we keep a short note of the shop address, the date and counts, with no personal details, to prove it was done.
• Waitlist email: until we have emailed you about launch, or until you ask us to remove it.

Uninstalling and deleting your data

• When you uninstall Aegis Bulk from Shopify, Shopify tells us, and we forget your access token and stop sending changes to your store.
• Shopify then sends us a separate data-erasure notice for your shop (currently about 48 hours after uninstalling, unless you reinstall). When it arrives, we delete the data connected to your shop, including the Aegis Bulk account that connected it.
• We have implemented the three privacy notices Shopify requires of every app (customer data request, customer data erasure and shop data erasure), and we verify that each one really comes from Shopify. Because we store no customer data, the two customer notices have nothing to return or erase.
• You can also delete everything yourself at any time: Settings → Delete my account. This cannot be undone.
• To be removed from the waitlist, contact us.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to certain processing. You can download a copy of your data as spreadsheets or as a complete data file (Settings → Download my data) and delete your account yourself. For anything else, contact us and we will help.

Security

Passwords are hashed, store access tokens are encrypted, sign-in sessions can be ended from Settings, requests from Shopify are signature-checked, and the service is served over HTTPS. No system is perfectly secure, so please use a strong, unique password.

Children

Aegis Bulk is for businesses and is not intended for anyone under 18.

Complaints

Please contact us first and we will try to put things right. If you are in Kenya you can also complain to the Office of the Data Protection Commissioner.

Changes

If we change this policy in a meaningful way we will update the date above and tell account holders.