Privacy Policy

Last updated: July 5, 2026

Yoomru is a Shopify application operated by FS Code ("we", "us"). This policy explains exactly what data the app handles, why, and what happens to it when you leave. We have tried to write it the way we would want to read it: specific and short.

Data we store

Store profile. Your myshopify domain, store name and timezone, received from Shopify when you install the app. The timezone is used so every schedule matches your Shopify admin clock.
Shopify access tokens. The offline access token (and its rotating refresh token) that Shopify issues to the app. They let Yoomru read your products and register webhooks. Scopes are limited to products, files and publication data; we never request access to orders or customers.
Connected channel credentials. When you connect a social channel, we store the token that network issues (or, for Telegram and Discord, the bot token you provide) together with the channel name and avatar. These are used for one purpose: publishing the posts you configured.
Posts and schedules. The content templates you write, the media URLs they reference, publish times, delivery status and, after publishing, the remote post id and link. This is your posting history inside the app.
Automation settings. Auto-share rules, planner configurations, per-network templates, brand kit colors and logo URL.
AI generation logs. When you use AI captions, we store the prompt that was sent and the text that came back, as the audit trail behind the daily usage limits.
Usage counters and feedback. Monthly and daily counters that enforce plan limits, and any rating or feedback message you choose to send us.

Data we do not collect

No customer personal data. The app has no access to your customers, orders or payment information, and its Shopify scopes do not include them.
No passwords. Authentication happens on Shopify and on each social network; we only ever receive tokens.
No selling or renting of data to anyone, ever.

Product data

Product titles, descriptions, prices, images and availability are read from your store to compose posts. Post templates keep placeholders until publish time, when the current product data is filled in. Published post text is kept as part of your posting history.

Where data goes

Social networks you connect. The content of your posts (text, images, videos, links) is sent to the networks you chose, through their official APIs.
OpenAI. If you use AI captions, the product facts needed for the caption (name, type, price, tags) and your prompt are sent to OpenAI to generate the text. No store credentials and no customer data are included.
Shopify. Billing runs entirely through Shopify; we never see a card number.
Infrastructure. The app runs on servers in the European Union, behind Cloudflare. Data is encrypted in transit (TLS) everywhere.

We use no advertising or cross-site tracking services, in the app or on this website.

Retention and deletion

Data is kept while the app is installed, so your history and automations keep working.
When you uninstall, Shopify sends us its data-removal webhook and we delete every record belonging to your store: tokens, channels, posts, settings, logs and counters.
You can also request deletion at any time by writing to [email protected].

GDPR and compliance webhooks

The app implements all three of Shopify's mandatory compliance webhooks. Because we store no customer personal data, customer data requests return nothing and customer redaction requests have nothing to delete; store redaction removes everything described above.

Changes

If this policy changes in a meaningful way, we will note it in the app and update the date at the top. Continued use after a change means you accept the updated policy.

Contact

Privacy questions: [email protected]