Legal
Privacy Policy
Last updated: October 19, 2026 · Operated by Baitk ([email protected])
Snoonu Connector (“we”, “us”, “the App”) is a third-party Shopify application operated by Baitk that helps merchants sync catalog and order data with the Snoonu marketplace. The App is not affiliated with or endorsed by Snoonu or Shopify unless explicitly stated.
1. Who this policy covers
This policy applies to merchants who install the App from the Shopify App Store or via Shopify admin, and to any customer personal data that may be processed while operating order middleware on the merchant’s behalf.
2. Data we collect and store
- Shop identity: Shopify shop domain, shop ID, and offline access tokens required for Admin API calls
- Snoonu credentials: encrypted API key, email, Business Unit ID, and related connection settings you provide
- Catalog sync state: product/variant SKUs, barcodes, mapped Snoonu SKUs, branch mappings, inventory snapshots, sync logs, and activity history
- Order middleware data: Snoonu order IDs, Shopify order IDs/names, line items (SKU/qty/price), totals, and status events. We intentionally do not store buyer name, phone, email, or address — that stays in Shopify Admin and/or Snoonu
- Billing: plan, billing status, and Shopify charge / subscription IDs
- API keys: hashed merchant API keys you generate inside the App
- Support: messages you send to [email protected]
3. How we use data
Data is used solely to operate the connector (sync inventory/pricing and process orders), enforce billing, provide support, and meet legal obligations including Shopify GDPR webhooks. We do not sell merchant or customer personal data.
Sharing with Snoonu: To sync catalog data we send product identifiers (SKU/barcode), price, stock, and availability to Snoonu’s Partner Integration API using credentials you provide. For order acceptance/status we send operational order IDs to Snoonu. We do not send Shopify buyer identity to Snoonu beyond what their order webhooks already contain when they call our endpoints.
4. Retention and deletion
- Uninstall: We wipe Snoonu credentials, revoke merchant API keys, pause sync, and mark billing cancelled. Shop row may remain until Shopify sends shop/redact (typically ~48 hours after uninstall).
- shop/redact: Hard-deletes the shop and related connector data for that domain.
- customers/redact: Removes any matching order middleware fields tied to the requested customer (we do not retain buyer name/phone/email/address by design).
- customers/data_request: We package operational order IDs/status for the requested customer and acknowledge Shopify. Full buyer PII lives in Shopify Admin and/or Snoonu — email [email protected] for assistance fulfilling a merchant export.
- Data subject requests are handled within 30 days where legally required.
5. Cookies and analytics
The embedded Admin app uses Shopify session tokens and does not set its own third-party marketing cookies. The public marketing site and this privacy page do not use analytics trackers. Authentication cookies required by Shopify App Bridge / OAuth may be set by Shopify as part of the platform.