Privacy policy

Effective 17 October 2026

GSP WooCommerce Migration (“the App”) is provided by GspTechnologies (“we”, “us”). It copies data from a merchant's WooCommerce store into their Shopify store. This policy explains what information the App handles when a merchant installs and uses it, and the choices merchants have.

1. Information we collect

From Shopify, when you install the App

• Your shop domain (for example your-store.myshopify.com) and an access token that lets the App act on your store with the permissions you approve during installation.
• Store settings needed for the migration: store currency, inventory locations and sales channels.
• Subscription status from Shopify Billing (plan name and whether it is active). Payments are processed by Shopify; we never see or store card or bank details.

Information you give us

• The URL of your WooCommerce store.
• WooCommerce REST API keys (consumer key and consumer secret). We ask for read-only keys. They are encrypted with AES-256-GCM before they are stored.
• Your migration choices (which data types to migrate) and anything you send to our support address.

Store data processed during a migration

When you run a migration, the App reads from your WooCommerce store and writes to your Shopify store: product titles, descriptions, prices, SKUs, barcodes, stock levels, weights, images, tags, categories and SEO titles/descriptions, and published blog posts and pages from WordPress. This data is transferred directly from WooCommerce to Shopify and is not kept on our servers after it has been written. Product images, and images used in posts and pages, are fetched by Shopify directly from their original URLs and stored in your Shopify store.

To make migrations reliable and repeatable, we keep:

• An ID map linking each WooCommerce record ID to the Shopify record created from it, so running a migration again updates records instead of duplicating them.
• Migration history: status, progress counts, and a report of warnings and errors that refers to records by their WooCommerce ID.
• The WooCommerce store URLs you have migrated from, used to apply your plan's store limit.

Customer personal data

If you choose to migrate customers or orders, the App reads your customers' names, email addresses, phone numbers and billing/shipping addresses, and your order history (items, amounts, taxes, shipping, discounts, payment method name and status), from WooCommerce and creates them in your Shopify store. We process this information only to perform the migration you request, on your behalf, as your data processor:

• Customer and order details are transferred directly to Shopify and are not stored on our servers. We keep only WooCommerce IDs linked to the Shopify IDs (so re-running a migration updates instead of duplicating), and report lines that refer to customers by their WooCommerce ID.
• Email-marketing consent is never invented: customers are not subscribed to marketing unless the source data records an opt-in.
• Customer passwords and payment details are never read or migrated.
• We do not contact your customers. Account invitations are only sent if you choose to send them from Shopify.

Technical data

Like most web services, our servers and hosting provider record basic request logs (such as IP address, timestamp and requested page) to operate and secure the service. These logs are kept for a limited time and are not used for advertising.

2. How we use information

• To perform the migrations you start, and to show their progress and reports.
• To let you resume, re-run or update a migration without creating duplicates.
• To manage your subscription and apply your plan's limits.
• To provide support when you contact us, and to diagnose and fix problems.
• To keep the App secure and prevent abuse.

We do not sell your information, use it for advertising, or use your store data to train machine-learning models.

3. Sharing

We share information only with:

• Shopify: the platform the App runs on, which receives the data the App writes to your store.
• Infrastructure providers that host our servers and database, under agreements that require them to protect the data and use it only to provide their service to us.
• Authorities, when required by law, or to protect our rights, users or the public.
• A successor organization if GspTechnologies is involved in a merger or acquisition, subject to this policy.

4. Retention and deletion

• You can delete any migration from your history inside the App at any time. This removes its record and report.
• When you uninstall the App, running migrations are stopped, and your Shopify access tokens and WooCommerce API keys are deleted immediately. Shopify then sends us a data-deletion request (shop/redact) 48 hours after uninstall, and we permanently delete all remaining data for your store: migration history and reports, the ID map, source store records and our copy of your purchases.
• Shopify data-protection requests about individual customers (customers/data_request and customers/redact) are answered promptly. Because the App does not store customer details, there is nothing to export; on a redact request we delete the ID link and report lines for that customer.
• Products and collections created in your Shopify store belong to you and stay there unless you delete them.

5. Security

• All connections use HTTPS. Requests from Shopify are verified with Shopify's signatures.
• WooCommerce API keys are encrypted at rest (AES-256-GCM) and never shown again after you enter them.
• We recommend read-only WooCommerce keys; the App never writes to your WooCommerce store.
• Access to production systems is limited to staff who need it to operate the service.

No system is perfectly secure. If we learn of a security incident affecting your data, we will notify you and the relevant authorities as required by law.

6. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California privacy laws), you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to complain to a data-protection authority. To exercise these rights, email contact@gsptechnologies.com. We respond within 30 days.

If you are a customer of a merchant using the App, please contact that merchant first: they control their store data. We will help them respond to your request.

7. International transfers

Our servers and providers may be located outside your country. Where required, we use appropriate safeguards, such as standard contractual clauses, for international transfers of personal information.

8. Children

The App is a business tool for merchants and is not directed to children under 16.

9. Changes to this policy

We may update this policy as the App changes. We will change the effective date above and, for significant changes, notify merchants in the App or by email.

10. Contact

GspTechnologies
Address to be added
Email: contact@gsptechnologies.com