Privacy policy - ScaleMore Feeds
Last updated: October 2026
1. Who is responsible
ScaleMore GmbH, Adolfsallee 21, 65185 Wiesbaden, Germany. Managing director: Christoph Hies. Contact for privacy questions and data requests: info@scalemore.eu. See also our legal notice.
2. What ScaleMore Feeds does
The app reads the product catalog of your Shopify store and builds product feed files (for example CSV) for your sales and advertising channels. Each feed has its own web address from which your channels retrieve the file.
3. Data we process, why, and on what basis
- Installation and account data: your shop address, the access token Shopify issues to the app (read access to products and inventory), the plan you chose, your subscription status and your trial history. We use it to provide the app and to apply your plan. Basis: performing the contract with you (Art. 6(1)(b) GDPR). Subscriptions are billed by Shopify; we do not receive payment card or bank details.
- Product data: titles, descriptions, prices, SKUs, barcodes, inventory, images, tags, collections, options and metafields of your products. We read it to build your feed files. The generated files, which contain this product data, are stored on our server so that your sales channels can retrieve them. Basis: Art. 6(1)(b) GDPR. Product data normally contains no personal data. If you put personal data into product texts, it ends up in your feed files.
- Your settings: the feeds you configure with their columns, filters and rules, and the history of recent generation runs. Basis: Art. 6(1)(b) GDPR.
- Support requests: if you write to us, we process your name, e-mail address and message to answer you. Basis: Art. 6(1)(b) and (f) GDPR (our interest in answering enquiries).
- Technical access data: when the app or a feed address is called, technical data such as IP address, time, requested address and browser information is processed by our hosting provider and our server to deliver and secure the service. For feed downloads, the requested address contains the feed's secret address. Basis: Art. 6(1)(f) GDPR (secure and stable operation).
The app does not request access to customer data or order data, and it does not store personal data of your customers. We use shop-level access (offline access tokens) and do not request or store profile data such as names or e-mail addresses of individual staff accounts. We use no analytics or advertising tools and do not sell data.
4. Service providers and recipients
- Fly.io hosts the application server, the file storage and the PostgreSQL database. Our servers are in the Frankfurt (Germany) region.
- Shopify provides the platform on which you use the app, including sign-in and billing. For your use of Shopify itself, Shopify's own privacy information applies.
- IONOS SE provides our e-mail service, which we use for support correspondence.
We have concluded a data processing agreement with Fly.io.
5. Transfers outside the European Union
Fly.io is a company based in the United States. Your data is stored in Frankfurt, Germany. Access by the provider from outside the EU, for example for support or administration, cannot be ruled out. According to Fly.io, it participates in the EU-US Data Privacy Framework.
6. How long we keep data
We keep your data while the app is installed. When your subscription ends, your feed addresses stop working shortly afterwards and the generated feed files are deleted. Your feeds and settings are kept in case you subscribe again. After you uninstall the app, Shopify notifies us, and we delete all data of your store, including settings and the stored token. Shopify sends this notification 48 hours after uninstallation. Technical access data is kept by the hosting provider for a limited time. Support correspondence is kept as long as needed to handle your request, and statutory retention periods (for example for accounting records) remain unaffected.
7. Feed addresses
Each feed has a long, secret web address. Anyone who knows the address can download the feed file. Share it only with the channels you use.
8. Cookies and external content
The public pages of this service (start page, legal notice, privacy policy, support) set no cookies and load no third-party content. When you use the app inside the Shopify admin, your browser loads Shopify's technology (such as App Bridge and fonts) from Shopify's servers. Shopify is responsible for that.
9. Security
Data is transmitted over encrypted connections. Our hosting provider stores the database and the files encrypted at rest. Access tokens are stored in the database and are used only to read your catalog.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). To exercise them, write to info@scalemore.eu or to ScaleMore GmbH, Adolfsallee 21, 65185 Wiesbaden. You also have the right to complain to a data protection authority. The authority responsible for us is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI) (website, complaint form).
11. Changes
We update this policy when the app or the legal requirements change. The version published here applies.
ScaleMore GmbH · Legal notice (Impressum) · Privacy policy · Support