Caravel Sync processes shop settings, feed profiles, encrypted connection credentials and uploads, product catalog snapshots, run logs and export artifacts. It does not request customer or order access. Upload product data only; do not include customer information.
We use this information to import authorised feeds, generate catalog exports, prevent duplicate writes and restore previous values. Credentials and uploads are encrypted using AES-256-GCM. Export URLs grant access to anyone holding them; the selected fields may include cost, so choose fields carefully and rotate a shared URL when necessary.
Run logs and rollback snapshots are retained for 30 days after completion. Profiles and the latest export are kept while the app is installed and, after uninstalling, until Shopify's shop-redaction request (shop/redact, sent about 48 hours after uninstalling) is processed; deleting a profile removes it earlier. Uninstalling disables runs and revokes export URLs. A verified shop-redaction request deletes app records, sessions, settings and audit references. Customer privacy requests are acknowledged; no customer records are collected by this app.
The shop platform, the source server you configure and the hosting provider process data needed to provide the service. Hosting: Contabo (server in France, EU). Subprocessor: Contabo (hosting). Contact support@caravelsuite.com to request access, correction or deletion of shop-related app data. The merchant is responsible for their authority to share feed data.