opsdeck (the “App”), operated by Barikreativa srl, provides operational observability, diagnostics and alerting for Shopify stores. This policy explains the personal data we process on behalf of merchants and how we protect it. For merchants’ customers, the merchant is the data controller and we act as a data processor.
Data we process
- Normalized Shopify operational events: order, fulfillment, product and inventory metadata and identifiers (including order, product and customer ids), status values, timestamps and technical messages.
- Shop access tokens, stored encrypted (AES-256-GCM), used only to call the Shopify Admin API on the merchant’s behalf.
Data minimization. We deliberately strip protected customer fields (name, email, phone, address) from webhook payloads before storage. AI diagnostics receive only a PII-light, normalized event timeline — never raw customer data.
Purposes
Store management, app functionality and analytics: monitoring store operations, building technical timelines, generating diagnostics and triggering operational alerts. We limit our use of personal data to these purposes. We do not sell personal data, and we do not use it for marketing, advertising or personalization.
Sub-processors
- Render (application hosting; EU — Frankfurt)
- Supabase (PostgreSQL database; EU)
- OpenAI (AI diagnostics; receives only PII-light normalized data)
Retention
Operational events are automatically deleted after the plan’s retention window (30 days on Starter, 90 on Pro, 180 on Agency). Configuration data is kept while the App is installed and removed on uninstall or upon a verified deletion request.
Security
All data is encrypted in transit (TLS) and at rest. Access tokens are additionally encrypted at the application layer (AES-256-GCM). Access is restricted and tenant-scoped; every request is authenticated.
Data subject rights & compliance
We honour Shopify’s mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact) and assist merchants in fulfilling access, correction and deletion requests.
Contact
Barikreativa srl — ivan@barikreativa.com