Privacy policy

Last updated: 5 November 2026

Wimblink is a Shopify app that copies products from a product API chosen by the merchant into the merchant's Shopify store. This policy explains what data it handles. It is written for merchants who install the app.

What we store

• Store details: the store's myshopify.com domain and the access token Shopify gives the app when it is installed.
• Source settings the merchant enters: the product API address, the login address, the username and the password or token. Passwords and tokens are encrypted before they are saved.
• Sync records: which products Wimblink created in the store, the time and result of the last sync, and a private webhook address for the store.

What we read and write in Shopify

Wimblink reads and writes products, product images, metafields and publication to the Online Store, as set by its access scopes. It does not read orders, payments or customers, and it does not process payments.

Shoppers

Wimblink does not collect or store personal data about a store's shoppers. The Buy button on a product is a link to the retailer's affiliate page. Once a shopper follows that link, the retailer's own privacy policy applies.

How we use data

Only to run the app: to sign in to the merchant's product API, create and update products, and show the merchant their settings and sync status. We do not sell data, use it for advertising, or use it to train AI models.

Who else receives it

• Shopify, to which the app sends the product data.
• The merchant's product API, to which the app sends the merchant's login.
• The server provider that hosts the app. Data is not shared with anyone else.

Cookies and tracking

The app page inside the Shopify admin does not set cookies, and this site has no analytics or advertising trackers. Cookies are used only for the sign-in to our own administration area.

Keeping data and deleting it

When a merchant uninstalls Wimblink, we delete the store's record, including the saved credentials and sync records. Shopify also sends a request to erase a store's data after uninstall, and we handle it the same way. Products already created in the store stay in the store, under the merchant's control. Server backups are kept for up to 14 days.

Security

Connections use HTTPS. Source passwords and tokens are encrypted at rest. Access to the server is limited to the people who run the app.

Your rights

You can ask what we hold about your store, ask us to correct or delete it, or withdraw consent at any time. Uninstalling the app deletes your data as described above.

Changes

If this policy changes, the date at the top changes too.

Contact

Questions about this policy can be sent through the support contact on the Wimblink app listing.