Public trust, legal, and operational readiness

GhostSync only requests the Shopify scopes required to read your product catalog, read and write inventory quantities, and resolve fulfilment locations.

AI is used during onboarding to generate supplier templates from sample files. Daily sync parsing, guardrails, delta calculation, and Shopify writes remain deterministic. Incidental PII in supplier files is never passed to OpenAI and is securely handled by our retention pipelines.

Raw supplier uploads

Deleted after 24 hours.

Merchant data

Core merchant records are retained until a verified deletion request is processed. Some billing, support, security, audit, and provider-side records may follow separate retention rules.

Account deletion

The current deletion flow removes core merchant records immediately, but some supporting, provider-side, finance, support, and log records may follow separate retention or manual cleanup workflows.

Data portability

Self-serve export covers core profile data, supplier configurations, subscription history, and recent sync/billing logs. It provides operational portability, not a full system-wide historical archive.

Encryption posture

GhostSync stores platform data on AWS-managed infrastructure with encryption at rest.