Lederly

Who we are

Lederly is a bulk product editing tool for Shopify, developed and operated by ecomfaktory (“we”, “us”). This policy explains what data we collect, why, and how we protect it.

What data we collect

• Shopify access token: used during your session to read and write products on your behalf. Held in your browser's memory only and gone when you close the tab. It is not saved on our servers, with one exception: when you create a schedule, an encrypted copy (AES-256) is kept so the schedule can run, and deleted afterwards.
• Store domain and name: used to identify your store for plan tracking and usage limits.
• Store email: fetched from Shopify on first connection and stored with your store record, used for service emails (welcome, schedule confirmations). Deleted automatically when you uninstall the app, or earlier on request.
• Scheduled changes: when you create a schedule, the changes you staged (product IDs, new and previous field values such as prices) are stored until the schedule runs, then deleted within 30 days.
• Notification email: if provided when creating a schedule, used to send a confirmation. Stored with the schedule record.
• Waitlist email: stored to contact you about plan availability if you join the waitlist.
• Usage counts: push count and schedule count per store per month, for plan limit enforcement.

What we do not collect

• We do not store your product data, prices, or catalog content, outside of the specific changes you explicitly schedule, which are deleted after execution.
• We do not store your Shopify access token server-side, except the encrypted copy needed to run a schedule you created, deleted after it runs.
• We do not sell your data to third parties.
• We do not use cookies for tracking or advertising.

Third-party services

• Shopify: product data is read from and written to your store via the Shopify Admin API.
• Resend: used to send transactional emails. Your email address is shared with Resend for delivery.
• Railway: our hosting provider (EU region).

Data retention

Schedule records are automatically deleted 30 days after execution. Usage counts reset monthly. When you uninstall the app, Shopify notifies us and all data about your store (store record, email, plan, usage, pending schedules) is deleted automatically. You can also request deletion at any time.

Security

Shopify tokens used for scheduled operations are encrypted at rest with AES-256-CBC. All communication is over HTTPS. Rate limiting and input validation are applied on all endpoints.

Contact

Questions? Email support@ecomfaktory.com.