RecycleBin – Product Restore (the “App”) provides automatic product backup and recovery services (the “Service”) to merchants who use Shopify to power their stores. The App is developed and operated by Exceloz. This Privacy Policy describes how personal information and store data are collected, used, shared, retained and deleted when you install or use the App in connection with your Shopify-supported store.
Personal Information the App Collects
When you install the App, Shopify makes certain information available to the App according to the permissions approved for RecycleBin. Shopify's public App Store listing currently identifies access to store-owner information and product/collection data.
Shopify account and merchant information
- Store identity, including the Shopify shop domain and internal identifiers needed to associate App records with the correct store.
- Store-owner information made available by Shopify, which can include name, email address, phone number and physical address.
- Shopify-issued authentication credentials and session information required to authenticate the store and securely call Shopify APIs. These credentials are used for App operation and are not displayed publicly.
- Plan, entitlement and billing-status information needed to determine which App features are available. Shopify handles merchant billing and payment processing for Shopify App Store plans.
Shopify API access
The production App requests the following Shopify Admin API scopes:
read_products— used to read product and collection information needed to maintain product snapshots and prepare a product for later recovery.write_products— used to recreate or update product and collection information when a merchant requests a restore.
Product information processed by the Service can include product IDs, titles, descriptions, handles, vendor and product-type information, tags, variants, SKUs, prices, inventory-related product information, images and image metadata, and collection memberships. The exact fields available can change as Shopify APIs evolve.
Product snapshots and deleted-product backups
To provide recovery after a deletion, RecycleBin maintains product snapshots while the App is installed. When Shopify notifies the App that a product was deleted, the relevant snapshot is moved into the recycle-bin workflow. RecycleBin may also store copies of product images needed for restoration. Deleted products are available for recovery through the App for up to 30 days.
Customer and order information
RecycleBin does not request Shopify customer or order API scopes for its product-recovery Service and does not use customer or order information to provide the Service. Like all public Shopify apps, RecycleBin is subscribed to Shopify's mandatory privacy-compliance webhooks. A compliance webhook payload can contain customer identifiers or contact information supplied by Shopify for a privacy request. RecycleBin processes those requests only for privacy compliance and does not use that information for marketing or product recovery.
Information collected independently from Shopify
The App does not require a separate Exceloz registration form for normal Shopify installation. If you contact Exceloz for support, we may receive the information you choose to provide, such as your name, email address, store domain, support message and files or screenshots you voluntarily send.
Our servers can also generate operational log information such as request time, App endpoint, Shopify shop domain, response status, error information and technical request identifiers. We use this information to operate, secure and troubleshoot the Service. We do not use App data for behavioural advertising.
How We Collect Information
We collect information through your Shopify account and Shopify APIs, Shopify webhooks, your direct communications with Exceloz, and technical server logs generated when the App is used. The App itself does not place advertising cookies or behavioural-advertising trackers in your storefront.
The public Exceloz website may use essential browser technologies and ordinary web-server logs necessary to operate and secure the website. If non-essential analytics are introduced where consent is legally required, they will be subject to the applicable consent requirements.
How Do We Use Your Personal Information?
We use the information described above only as reasonably necessary to provide and operate the Service, including to:
- Authenticate Shopify stores and maintain the connection between Shopify and RecycleBin.
- Maintain product snapshots needed to protect against future accidental deletions.
- Save deleted-product information and images required for recovery.
- Restore products, variants, images, inventory-related information and collection memberships when requested by the merchant and supported by Shopify.
- Determine App plan, billing and feature eligibility.
- Provide merchant support and respond to enquiries.
- Monitor reliability, troubleshoot failures, prevent abuse and protect the security of the App.
- Respond to Shopify privacy-compliance requests and comply with applicable laws and platform obligations.
Sharing Your Personal Information
We share information only where necessary to operate the App or comply with law. This can include:
- Shopify, because RecycleBin operates as a Shopify app and communicates with Shopify APIs, App Bridge, webhooks and Shopify App Store billing systems.
- Infrastructure and hosting providers used to run the App, database, storage, networking, security and operational systems.
- Communications or support providers when necessary to receive and respond to merchant support requests.
- Professional advisers, regulators or authorities where disclosure is required to comply with law, a lawful request, protect legal rights, investigate fraud or abuse, or protect the security of users and the Service.
We do not sell Shopify merchant, product or personal information. We do not share Shopify store data with third parties for their own advertising purposes.
Behavioural Advertising
RecycleBin does not use Shopify merchant data, Shopify product data or App activity to provide behavioural or targeted advertising, and the App does not sell personal information for advertising purposes.
Data Retention
RecycleBin provides a 30-day recovery window for deleted products. Product snapshots for products that still exist in the merchant's store may be maintained while the App is installed because they are needed to protect against a future deletion. Deleted-product and restoration records can also be retained for operational, security, support and service-integrity purposes while the App remains installed.
When the App is uninstalled, access to the Service is suspended. Shopify subsequently sends the mandatory shop/redact privacy request. RecycleBin processes that request to delete the store's primary App database records. Technical logs and backup/storage copies can persist for a limited operational period where necessary for security, disaster recovery, legal compliance or system cleanup, and are not used to provide new services or marketing after the applicable deletion obligation.
If applicable law requires us to retain particular information for longer, we may retain only the information necessary for that legal obligation.
Shopify Privacy Requests
RecycleBin subscribes to Shopify's mandatory customers/data_request, customers/redact and shop/redact compliance topics. These requests are authenticated using Shopify webhook signatures. If a request concerns data that RecycleBin actually holds, we will respond in accordance with Shopify requirements and applicable privacy law.
Your Rights
Depending on where you are located, you may have rights relating to personal information, including rights to request access, correction, deletion, restriction, objection or portability, and to withdraw consent where processing is based on consent. To exercise a right relating to a Shopify-supported store, contact us using the details below and identify the relevant Shopify store.
European Economic Area, United Kingdom and Switzerland
Where European data-protection law applies, we process information as necessary to perform our contract with the merchant, to comply with legal obligations, and for legitimate interests such as operating, securing and improving the Service where those interests are not overridden by applicable rights. Exceloz is based in India, so information can be processed in India and in other countries where our service providers operate. Where required, we use appropriate legal safeguards for international transfers.
Security
We use administrative and technical safeguards designed to protect information, including authenticated Shopify session flows, signed webhook verification and access controls appropriate to the Service. No internet transmission or storage system can be guaranteed to be completely secure.
Children's Privacy
RecycleBin is a business-to-business Shopify application intended for merchants and store staff. It is not directed to children.
Changes
We may update this Privacy Policy from time to time to reflect changes to the App, Shopify APIs, our data practices, legal requirements or operational practices. The current version will be posted on this page with its updated date.
Contact Us
For more information about our privacy practices, to exercise a privacy right, or to make a complaint, contact:
Exceloz
Email: support@exceloz.com
309, Block - 6, My Home Avatar
Puppala Guda, Manikonda, Near Avatar Circle
Hyderabad, Telangana 500089
India
If a dedicated Data Protection Officer becomes legally required, the applicable contact information will be published on this page.