Privacy Policy

This policy explains how KONSTANTINOS KATSINARIS L.P. ("Inciwell", "we", "us") handles information in connection with the Inciwell Shopify app and this website. Questions: inciwell@gmail.com.

Who we are. Inciwell is a Shopify app that helps merchants manage and display product-safety information for EU markets.

What we process.

• Installation data: your store's myshopify domain, the Shopify API access token, and session records needed to authenticate and run the app.
• App settings and operational data: your app settings, plan/subscription status, audit-scan results cache, and an event log. This is the minimum needed to operate the app.
• Your product-safety content (manufacturer and responsible-person details, ingredient lists, warnings, etc.) is written to your own Shopify store (metafields and metaobjects). It lives in your store, not on our servers, and remains with your store.

What we do NOT collect. Inciwell manages product information, not your customers' personal data. We do not collect, store, or process buyer personal data through the app.

Cookies. The embedded app authenticates with Shopify session tokens and does not rely on third-party cookies. This marketing website uses no advertising or tracking cookies.

Sub-processors. We rely on: Shopify (platform and Admin API), Fly.io (application hosting), and Sentry (error monitoring). Each processes data only to provide its service. See our Data Processing page for details.

Legal bases (GDPR). We process installation and operational data to perform our contract with you (providing the app) and for our legitimate interest in operating and securing it. For data stored in your Shopify store, you are the controller and we act as your processor.

Retention. Session and settings data are kept while the app is installed and are deleted or anonymized after uninstall, in line with Shopify's mandatory app-uninstall and shop-redaction webhooks (typically within 48 hours of the redaction request).

Your rights. Subject to applicable law, you may request access, correction, deletion, or export of the data we hold about you. Contact inciwell@gmail.com.

International transfers. Our processors may store data in the EU and the United States; transfers rely on appropriate safeguards where required.

Changes. We may update this policy; the "Last updated" date reflects the latest version.

Contact. KONSTANTINOS KATSINARIS L.P. — inciwell@gmail.com.