Privacy Policy

Milanus Connect — Shopify application by Milanus

Last updated: July 2, 2026

Milanus Connect (the “App”) is a Shopify application operated by Milanus (“we”, “us”). The App lets an authorized dealer (“merchant”) publish a curated Milanus product catalog — products and inventory — into the merchant’s own Shopify store. This policy explains what data the App accesses, stores, and how it is handled.

No customer or order data. Milanus Connect does not access, request, or store any of your store’s customers, orders, checkouts, or fulfillment data, and it does not process any personal or “protected customer data”. The App operates entirely at Shopify’s Level 0 data tier.

1. Information the App accesses

When a merchant installs the App, it requests only the minimum Shopify Admin API access scopes required to publish and keep the catalog in sync:

read_products, write_products — create and update the catalog products in the merchant’s store.
read_publications, write_publications — publish those products to the store’s sales channel.
read_inventory, write_inventory — keep the inventory quantities of the catalog products up to date.
read_locations — identify the store location where inventory quantities are set.

These scopes cover product, publication, inventory, and location data only. No other areas of the Shopify store are accessed.

2. Information the App stores

To operate the sync, the App stores the following on its servers:

The store’s myshopify.com domain.
An encrypted Shopify access token for the store (stored encrypted at rest; used only to call the Shopify Admin API on the merchant’s behalf).
Sync configuration and status chosen by the merchant and by Milanus (for example, pricing multipliers, whether syncing is active, and the catalog assigned to the store).
Per-product sync records (the part number and the resulting Shopify product/variant identifiers) used to detect changes and avoid duplicate updates.

None of this contains end-customer personal information.

3. How the App uses the information

The stored information is used solely to publish the Milanus catalog into the merchant’s store and to keep the products and their inventory quantities in sync. We do not use it for advertising, and we do not sell it.

4. Sharing

We do not sell your data and we do not share it with third parties, except with Shopify as strictly necessary to operate the App (through the Shopify Admin API you authorize on install) and where required by law.

5. Data retention and deletion

Uninstall. When the App is uninstalled, Shopify sends an app/uninstalled webhook and the App stops syncing that store.
Shop data erasure. On Shopify’s shop/redact request (sent 48 hours after uninstall), the App purges the store’s data (domain, access token, sync configuration and sync records).
Customer data requests. Because the App stores no customer personal data, Shopify’s customers/data_request and customers/redact requests have no customer data to return or delete; they are acknowledged accordingly.

6. Security

Access tokens are stored encrypted at rest. All communication with Shopify uses HTTPS, and incoming Shopify webhooks are verified with an HMAC signature before they are accepted.

7. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the current version.

8. Contact

Questions about this policy or your data? Contact us at sales@milanus.com.