← ShopBridgeShopBridge privacy and data
Who operates ShopBridge
Deuver provides ShopBridge to Shopify merchants. Contact hello@everscope.app for access, deletion, security or service questions. Updated 2 October 2026.
Data and purpose
We import product and variant identifiers, SKUs, catalog fields, prices, order and line identifiers, order amounts, currencies and dates, refunds, inventory item costs, location names and inventory quantities for merchant reporting and exports. Customer names, email addresses, telephone numbers and delivery addresses are not requested. Order identifiers and linked purchase records can still be personal data. We do not sell store records or use them for advertising.
Access and hosting
Read-only Shopify permissions determine available tables. The current pilot permits exports to the Shopify store owner. Shopify user ID and owner status are checked for access; this identity cache expires after one minute. Refreshable Shopify credentials and data-request files are encrypted with AES-256-GCM. The application database uses an encrypted Fly.io volume in Amsterdam. Store records in that database are not individually encrypted. HTTPS protects network transfers. Power BI receives a separate revocable export key, never a Shopify token.
Providers and your exports
Fly.io provides hosting, network delivery and volume snapshots. Deuver signed the Fly.io data-processing addendum on 2 October 2026; the completed document includes Standard Contractual Clauses. Its application to Deuver processing merchant records is still being checked before commercial onboarding. Shopify provides installation, store APIs and subscription billing. Power BI Desktop runs locally; publishing to Microsoft Power BI Service is your separate choice. Fly.io is an international provider with its own subprocessors: Amsterdam application hosting is not a promise that all platform metadata or backups remain exclusively in the Netherlands. See the linked provider information.
Retention and deletion
The latest complete export remains available while the app is installed. Superseded exports are removed after about 24 hours. App sync logs and customer data-request files are retained for 30 days. Verified uninstall/shop-redaction webhooks remove active store data and credentials. Verified order/customer-redaction webhooks invalidate affected exports and block reimport of redacted orders. App database backups are encrypted, created daily and retained for seven daily dates; these backups are invalidated after verified erasure. Fly.io volume snapshots have a configured five-day retention and can expire separately. Operator recovery-test copies are removed after validation. Files already downloaded or loaded into Power BI remain under the merchant’s control.
Provider retention
Application deletion and configured backup expiry do not describe every provider record. The signed Fly.io addendum states a 90-day retention period following termination of the Fly.io agreement. This is separate from uninstalling ShopBridge from a store and from the five-day volume snapshot setting. We do not promise immediate deletion of every provider-held copy.
Merchant responsibilities and rights
For store data, the merchant determines the reporting purposes and is responsible for lawful processing and fulfilling customer requests. Deuver processes these records to provide the selected service. ShopBridge does not run advertising pixels or track storefront visitors. Shopify access requests generate a merchant-only file: verify the requester before delivering it. Contact us for assistance or review the draft merchant data-processing agreement before commercial onboarding. Provider-role clarification and public distribution review remain open. This pilot notice does not certify regulatory compliance.
Recovery
A restored backup must stay offline until uninstall and erasure instructions received since that backup have been reconciled and applied. Source access must be rechecked before exports reopen. Backups support recovery; no availability or recovery-time guarantee is offered in this pilot.
Operator: Deuver · Steenplaetsstraat 6, Unit 4.14, 2288 AA Rijswijk, Netherlands
KVK: 92707009 · VAT ID: NL004971907B77
Business website · Contact support · Merchant data-processing agreement · Fly.io subprocessors · Service terms