Privacy Policy

What we collect

• Order data — your email, package and payment status (payment card details are handled entirely by Stripe; we never see them).
• Intake data — store domains, app stack, catalog size and notes you provide.
• Store access tokens — Admin API tokens you provide, encrypted with AES-256-GCM at rest, decrypted only by your migration engineer, deleted 30 days after completion.
• Migrated store data — during the migration we process your store's records (including your customers' data) solely to copy them to your destination store, acting as your processor.
• Leads — an email address you submit for an assessment or call request.

What we don't do

No selling of data, no advertising use, no third-party analytics trackers on this site.

Processors

Stripe (payments), Cloudflare (hosting, storage). Store data in transit is protected by TLS.

Retention & your rights

Migration working data and tokens are deleted 30 days after completion; order records are retained for accounting. Email support@shopify2shopify.pages.dev to access or delete your data.