Privacy Policy

Privacy Policy – Spectral Data LabsEffective Date: January 6, 2026OverviewSpectral Data Labs develops software tools that integrate directly with Shopify merchant stores. Our primary application Clean Union – Customer Deduplication & Data Hygiene accesses and processes Shopify customer records for the purpose of identifying likely duplicate accounts, analyzing dormant or problematic records, and providing merchants with tools to improve database health.What Data Our Apps AccessWhen a merchant installs Clean Union, the app is granted permission through Shopify OAuth to access read-access to the following categories of Shopify data:Customer accounts• Names, email addresses, and phone numbers• Postal and shipping addresses• Order history metadata• Product and collection information• Subscription status metadata from Shopify-supported subscription appsThis access is limited strictly to the scopes the merchant approves at installation.How We Use and Process DataClean Union uses accessed Shopify information to:• Compare records and calculate similarity between customer or household pairs• Generate confidence scores for likely matches• Display potential duplicate matches to merchants• Track merge activity logs• Maintain app session state• Provide in-app dashboards and reports• External Storage• To provide duplicate detection functionality, Clean Union maintains an encrypted PostgreSQL database hosted on Replit cloud servers. The database temporarily stores only what is necessary to deliver services to the installing merchant, including:• Customer identifiers and authorized contact information for detected duplicate pairs• Configuration settings• Operational logs• Authenticated store identifiersNo Spectral Data Labs employee can access merchant data except for the purpose of verified technical support.What We Do NOT DoSpectral Data Labs and Clean Union:• Do not sell, rent, or share merchant customer data with third parties• Do not use customer data for marketing, advertising, or model training• Do not access or store any payment methods or credit card information• Do not retain personal customer data after uninstall beyond what is required for webhook processingData RetentionData for active merchants is retained only to provide service continuity and allow resuming of duplicate scans.When a merchant uninstalls Clean Union, all stored data associated with that Shopify store is deleted within 48 hours, in compliance with Shopify GDPR requirements.Security• All data access and storage:• Uses Shopify OAuth authentication• Encrypts access tokens at rest• Transmits data only over encrypted HTTPS connections• Implements access-controlled servers and regular dependency updates• Merchants are responsible for maintaining appropriate staff permissions inside their Shopify admin.GDPR and Jurisdictional ComplianceClean Union implements Shopify-required GDPR webhooks, including:• Customer data request handling• Customer data deletion upon request• Shop data deletion upon uninstallFor GDPR-covered merchants, Spectral Data Labs acts only as a data processor on behalf of the Shopify merchant.User RightsShopify merchants maintain full control of their data and may:• Uninstall the app at any time (triggers automatic data deletion)• Request data export or deletion• Revoke app access through Shopify settingsCookie Policy – Spectral Data Labs WebsiteThe Spectral Data Labs marketing website may use cookies, analytics tags, or tracking pixels (such as Google Analytics or Meta) to measure performance and improve website experience.Cookies are used only for the website itself and are not connected to Clean Union application processing.Users may disable cookies through browser settings.Data Processing Addendum – Spectral Data LabsThis Addendum applies to Merchants subject to the EU General Data Protection Regulation (GDPR).Clean Union accesses and processes Shopify customer data only as a processor on behalf of the Merchant.Spectral Data Labs stores externally only the data required for service functionality.All Merchant data is encrypted and access-controlled.Uninstalling Clean Union triggers deletion of all externally stored shop data within 48 hours.Customer-specific deletion requests are honored promptly via:
📧 [email protected]Contact us with questions or complaints via:
📧 [email protected]