Legal
Privacy policy
What Ecomsync collects, why it needs it, who helps process it and when it is deleted.
Last updated 7 October 2026
Who we are
Ecomsync is a product of Fortuni LLC, a United States company registered in Missouri. In this policy, “we” and “us” mean Fortuni LLC.
The policy covers this website, ecomsync.ai, and the Ecomsync app at app.ecomsync.ai. Write to hello@ecomsync.ai with any question about your data.
What Ecomsync never reads
Ecomsync never reads your Shopify customer or order data. It does not ask for those permissions.
If your store grants them anyway, the app refuses every request to Shopify that touches orders, customers, addresses, checkouts, refunds, fulfilments, discounts or gift cards. The refusal happens before anything is sent to Shopify.
What we collect, and why
On this website
- Starting a trial. Your email address and the plan you pick. We pass them to Stripe to open checkout, and your Ecomsync account is created with that email.
- The questionnaire. Your name, your email, your store address if you give it, your answers and anything you write. We use them to reply to you and to set up your trial.
- A completed checkout. Stripe tells us your name, your email and your plan, so we can set up your workspace and know a new trial has started.
This website sets no cookies of its own and runs no analytics or advertising scripts.
In the Ecomsync app
- Your account. Your email address, your name if you add it, and your workspace name. You sign in with a password or with a link sent to your email.
- Your store connection. Your store's domain, and the client ID and client secret of the custom app you create in Shopify. The secret is encrypted at rest, never logged and never shown again after you save it.
- A copy of your catalogue. Products, variants, collections, metafields, images and inventory levels, kept in step with Shopify so the agent and the health score can read them.
- Change records. The old and new value of every field Ecomsync writes, who approved it and when.
- Agent conversations. What you ask the agent and what it answers.
- Technical logs. A record of the calls Ecomsync makes to Shopify for your store, used to find and fix problems.
The app uses cookies to keep you signed in and to remember settings, such as the store you last opened and your display theme. They are not used for tracking or advertising.
Billing
Stripe runs checkout and billing on its own pages. Your card details go to Stripe and never reach us. Stripe also collects your billing address and, if you give one, your tax ID. Stripe tells us which plan you are on and whether your payments succeed.
The AI model
The agent runs on models from Anthropic. To work on a request, the model receives what you asked and the parts of your catalogue the request needs, such as product titles and descriptions.
It never receives your Shopify credentials. It cannot receive customer or order data, because Ecomsync cannot read any.
Who processes data for us
These companies process data on our behalf. Each one does one job.
Service providers
- Supabase
- Database and sign in. Your account, your catalogue copy, change records and the encrypted store credentials, in the EU region eu-west-1.
- Vercel
- Hosting for this website and the app.
- Anthropic
- The AI model behind the agent.
- Stripe
- Checkout, payments and invoices.
- Resend
- Email from the app, such as usage alerts, payment notices and trial reminders.
- Inngest
- Background work, such as catalogue syncs and applying approved changes. It receives the details of each job, such as which store to sync.
Shopify is not on this list. It is where your store lives, and Ecomsync connects to it through the custom app you create, with the permissions you grant.
Where your data is stored
Your account, your catalogue copy, change records and store credentials are stored by Supabase in the EU, in the region eu-west-1.
Fortuni LLC is a United States company, and some of the providers above process data in the United States.
How long we keep it
Deletion timetable
- Store credentials
- Destroyed the moment you disconnect the store.
- Catalogue copy
- Deleted 30 days after you disconnect the store.
- Change records
- Kept 90 days on every plan, so you can always see what was changed.
- Agent conversations
- Kept 90 days.
- Technical logs
- Kept 30 days.
- Closing your account
- Every credential is destroyed immediately, and everything else within 30 days.
Questionnaire replies are kept so we can reply and follow up, and deleted when you ask. Stripe keeps payment records under its own privacy policy.
Security
Store credentials are encrypted at rest, never logged and never shown again after you save them.
Every request is checked against your workspace before any of its data is read or written.
If a security incident affects your data, we tell you within 72 hours. We say what happened, what was reachable, what we did and what you need to do.
Your choices
- Disconnect a store at any time in Ecomsync, or remove the custom app in Shopify. Access stops at once.
- To ask for a copy of your personal data, a correction or its deletion, write to hello@ecomsync.ai.
- To close your account, write to the same address.
- If you are in the EU or the UK, you can also complain to your local data protection authority.
Changes to this policy
When this policy changes, the date at the top changes with it. The terms of service cover how you may use Ecomsync.