MarketSync

MarketSync — Privacy Policy

1. About MarketSync

MarketSync is a product-catalog and social-publishing service. It lets a merchant connect their Shopify or WordPress store to their MarketSync account so their product catalog can be kept in sync, and it lets a company or store optionally connect a Facebook Page, Instagram professional account, Pinterest account, TikTok account and/or YouTube channel so product content, including videos you choose to post, can be published to them from MarketSync.

2. Information the app accesses — Shopify

When you install the MarketSync app and connect your Shopify store, the app is granted access, through Shopify's Admin API, to:

• Products (read and write) — titles, descriptions, images, tags, variants, prices, SKUs, product types, and collections.
• Inventory (read and write) — inventory quantities and inventory item identifiers.
• Metaobject entries and their definitions (read only) — the names of your own ready-made disclosure entries (for example “PERSONAL USE ONLY — NOT FOR COMMERCIAL USE”), so that a digital product can be linked to the entry you already have. The app never creates or changes these entries.
• Sales channel publications (read and write) — the list of your sales channels (Online Store and Point of Sale) and the publishing of the products the app creates to them, so that they appear in your shop and at your point of sale. The app does not read orders, sales, or channel settings.

The app does not request, access, or store customer personal data, orders or transaction data, payment or financial data, or Shopify staff account data.

3. Information the app accesses — Facebook and Instagram

Connecting a Facebook Page (and, where applicable, its linked Instagram professional account) is optional and requires you to explicitly authorize it from inside MarketSync. When you do, the app requests:

• pages_show_list — to show you the list of Pages you manage so you can pick which one to connect.
• pages_manage_posts — to publish product posts, and videos you choose to post, to your connected Page on your behalf.
• pages_read_engagement — to display basic post engagement stats inside MarketSync.
• instagram_basic — to read basic information about your linked Instagram professional account.
• instagram_content_publish — to publish product content, and videos (Reels) you choose to post, to your connected Instagram account on your behalf.

If your Instagram account isn't linked to a Facebook Page, you can instead connect it directly through Instagram's own login, which requests:

• instagram_business_basic — the same basic account information as above, read directly from Instagram.
• instagram_business_content_publish — the same publishing permission as above, granted directly through Instagram.

The app does not request access to Messenger, ad accounts, your personal profile or timeline, friends lists, or any Page/Instagram account other than the one you explicitly connect.

4. Information the app accesses — Pinterest

Connecting a Pinterest account is optional and requires you to explicitly authorize it from inside MarketSync. You log in on Pinterest's own authorization page; MarketSync never sees or stores your Pinterest password. When you authorize, the app requests:

• user_accounts:read — to read your Pinterest username, so you can see which account is connected.
• boards:read — to find a board to publish to, and to list your boards.
• boards:write — to create a board named "MarketSync Products" if your account has no board yet.
• pins:read — to display your recent Pins inside MarketSync.
• pins:write — to publish product Pins, and video Pins you choose to post, to your account on your behalf.

The app does not request access to ads, billing, business accounts, catalogs, analytics, or any account other than the one you explicitly connect. Pinterest data is used only to provide the features above.

5. Information the app accesses — TikTok

Connecting a TikTok account is optional and requires you to explicitly authorize it from inside MarketSync. You log in on TikTok's own authorization page; MarketSync never sees or stores your TikTok password. When you authorize, the app requests:

• user.info.profile — to read your TikTok display name and username, so you can see which account is connected.
• video.list — to display your recent TikTok videos and their public counts inside MarketSync.
• video.publish — to post a video to your account. MarketSync only does this on a screen where you see which account will receive the post, choose who can view it, and confirm that specific post. It never posts to TikTok automatically.

TikTok data is used only to provide the features above.

6. Information the app accesses — YouTube

Connecting a YouTube channel is optional and requires you to explicitly authorize it from inside MarketSync, on Google's own consent screen; MarketSync never sees or stores your Google password. When you authorize, the app requests:

• https://www.googleapis.com/auth/youtube.upload — to upload a video to your channel on your behalf, only when you choose a video and post it from MarketSync.
• https://www.googleapis.com/auth/youtube.readonly — to read your channel's name and your own videos' titles, thumbnails and public counts, so they can be shown inside MarketSync.

MarketSync uses YouTube API Services. By using the YouTube features you also agree to be bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke MarketSync's access to your YouTube data at any time through the Google security settings page. MarketSync's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Videos you post

When you post a video from MarketSync to Facebook, Instagram, Pinterest or YouTube, the video file (and, for Pinterest, its cover image) is uploaded to MarketSync only so it can be sent to the platforms you selected:

• The file is held temporarily on MarketSync's server while it is being sent, and deleted as soon as every selected platform has finished — whether the post succeeded or failed. MarketSync keeps no copy of your video.
• Instagram and Pinterest fetch the video (or cover image) from a web address instead of receiving it directly, so for those few minutes the file is reachable at a private, randomly generated address that only works until the post finishes.
• MarketSync posts the video exactly as you provided it; it does not add a logo, watermark or text, and does not analyse or alter its contents.
• A short record of each post — its title, description and tags, which platforms it went to, whether each succeeded, and the link to the published post — is kept for up to 7 days so you can follow its progress, and is then deleted automatically.

8. How the information is used

Product, inventory, Page, Instagram, Pinterest, TikTok and YouTube data is used only to:

• Display your store's catalog inside your MarketSync account.
• Keep that catalog in sync when it changes on either side.
• Create and update products from your MarketSync catalog on your store, including creating collections that match your MarketSync categories.
• Publish product content to a Facebook Page and/or Instagram account you have connected, only when you take an explicit action inside MarketSync to do so.
• Publish product Pins to a Pinterest account you have connected, only when you take an explicit action inside MarketSync to do so.
• Post a video to the Facebook, Instagram, Pinterest, TikTok or YouTube account(s) you select, only when you choose the video and confirm the post inside MarketSync.
• Display your connected accounts' recent posts and videos, with their public counts, inside MarketSync.

9. Storage and security

• Synced product and inventory data is stored in MarketSync's database, hosted on managed cloud infrastructure.
• Your store's Shopify access token and any Facebook, Instagram, Pinterest, TikTok or YouTube access or refresh token are encrypted (AES-256-GCM) before storage, kept with restricted access, and used only to make API calls on your behalf.
• Data is transmitted over encrypted (HTTPS/TLS) connections.

10. Data sharing

MarketSync does not sell your data and does not share it with third parties for their own purposes. Data obtained from Facebook and Instagram is used solely to provide the connected features described above, is not used for advertising, and is not shared with any third party, in line with Meta's Platform Terms. Data is processed only by infrastructure providers (hosting and database services) acting on MarketSync's instructions.

Data obtained from Pinterest is used solely to provide the connected features described above. It is not sold, not shared with any third party, not used for advertising, and not used to train machine-learning or AI models, in line with Pinterest's Developer Guidelines.

Data obtained from TikTok is used solely to provide the connected features described above. It is not sold, not shared with any third party, and not used for advertising, in line with TikTok's developer terms. Data obtained from Google and YouTube APIs is used solely to provide the user-facing features described above; it is not sold, not shared with any third party, not used for advertising, and not used to train machine-learning or AI models, and no human reads it except where you ask us for support, where it is needed for security, or where the law requires.

11. Data retention and deletion

• Your data is retained while the app or the relevant connection is active.
• When you uninstall the Shopify app, MarketSync deletes the store's synced product data and its store record (which holds the access token). Shopify also sends a shop/redact request approximately 48 hours after uninstall; on receipt, any remaining data for that store is erased.
• When you disconnect a Facebook Page or Instagram account inside MarketSync, its access token and connection record are deleted from MarketSync's database.
• When you disconnect a Pinterest account inside MarketSync, its access token, refresh token and the stored account username and ID are deleted from MarketSync's database. A record of Pins MarketSync published (the Pin ID and link) remains in your content history until you ask us to delete it. You can also revoke MarketSync's access at any time from your Pinterest account settings (the connected apps / permissions page).
• When you disconnect a TikTok account or a YouTube channel inside MarketSync, its access token, refresh token and the stored account name and ID are deleted from MarketSync's database. You can also revoke MarketSync's access from your TikTok app settings (Security and permissions → Apps and services) or from the Google security settings page.
• Videos you post are deleted from MarketSync's server as soon as every selected platform has finished, and the short record of each post is deleted automatically after 7 days (see section 7).
• You may request access to, or deletion of, your data at any time by contacting us at the address below, or by following the steps on our data deletion page. MarketSync also responds to Shopify's customers/data_request and customers/redact requests; because the app stores no customer data, these return no customer information.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the latest revision.

13. Contact

Questions or data requests: info@dbeat.co.uk