Privacy Policy

Operator: Hive Data Security
Contact: info@discogsimporter.app
Last updated: January 2026

Discogs Importer (the “App”) helps merchants create Shopify products using metadata fetched from Discogs, and can optionally help connect Shopify products with the merchant’s Discogs Marketplace inventory. This policy explains what data we access, what we store, and how it’s used.

Data we access

• Shopify: product read access for duplicate detection; product/metafield write access to create or update products at merchant request; inventory and location access when enabled Sync workflows need to queue linked Discogs inventory updates after Shopify stock changes.
• Discogs: search queries and release metadata returned by Discogs for the selected release. If the merchant enables Sync, the App may also use the merchant’s Discogs API token to access their Discogs Marketplace inventory and orders.

Data we store

• Shop domain and installation/session identifiers.
• Shopify access tokens required to operate the App (stored securely).
• Optional Discogs API tokens for Sync features, stored encrypted and removable by the merchant.
• Usage counters and privacy-limited Google Analytics page views for product improvement, billing, and abuse prevention. Analytics events do not include customer personal data, Discogs tokens, product titles, search text, or Shopify embedded app query strings.
• Basic operational logs (timestamps, success/error codes) for reliability and support.

Webhooks

The App registers Shopify webhooks for lifecycle events (e.g., app/uninstalled, scopes update), product/inventory updates, and paid orders to manage installation state, revoke access tokens where applicable, and support merchant-enabled Sync workflows.

How we use data

• Authenticate the merchant and operate the embedded app.
• Perform searches and display results.
• Create draft or live products at the merchant’s request.
• Sync linked Discogs Marketplace inventory when the merchant enables it.
• Detect duplicates and enforce plan limits.
• Troubleshoot errors and improve reliability.

Sharing

We do not sell personal information. We share data only with service providers required to operate the App (e.g., hosting/database), and only to the extent necessary.

Retention

We retain minimal operational data only as long as needed to provide the service, support billing periods, and handle support/legal needs. Uninstalling the App revokes access via Shopify.

Deletion requests

You can uninstall the App at any time in Shopify. If you want deletion of retained operational data, email info@discogsimporter.app and include your shop domain.