Privacy Policy

Last updated: 25 September 2026

This policy explains what data Maniastra ("we", "us") collects when a merchant installs one of our applications on a Shopify store, why we collect it, and what rights the merchant and their customers have.

1. Who we are

Maniastra is operated by Dorian Hrymajllo, Poland. Contact: support@maniastra.com. For questions about personal data, write to the same address with "Privacy" in the subject line.

2. What we collect

• Store data. Store domain, store name, contact email, plan, country and timezone, received from Shopify when the app is installed.
• Data required by the app's function. Only the resources covered by the access scopes shown to you during installation (for example products or orders). We request the narrowest scopes the feature needs.
• Technical logs. IP address, timestamp, request path and error traces, kept for security and debugging.

We do not sell personal data and we do not use it to train machine-learning models.

3. Why we process it

To provide and operate the app (performance of a contract), to keep the service secure and debug failures (legitimate interest), and to meet accounting and legal obligations where applicable.

4. Where the data is stored

On dedicated servers located in the European Union (Germany). Access is limited to the operator. Data is encrypted in transit via TLS. Backups are retained for 30 days.

5. Sub-processors

• Shopify Inc. — the platform the app runs on.
• Netcup GmbH (Germany) — server hosting.

6. Retention and deletion

When the app is uninstalled, we receive Shopify's app/uninstalled webhook and delete the store's records within 48 hours. Shopify's mandatory requests (customers/data_request, customers/redact, shop/redact) are handled within 30 days as required by Shopify's Partner Program.

7. Your rights

Under the GDPR you may request access, correction, deletion, restriction or portability of your personal data, and you may object to processing based on legitimate interest. Write to support@maniastra.com; we answer within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority (UODO).

8. Customers of the merchant

Where our app processes data about a merchant's customers, the merchant is the controller and Maniastra acts as a processor on the merchant's instructions. End customers should direct requests to the store they purchased from; we assist the merchant in fulfilling them.

9. Changes

We will update this page when our processing changes and revise the date above. Material changes are announced in the app.