Information we collect
Sned collects the information reasonably needed to provide, secure, and support the service. The exact information depends on the connections and features a merchant uses.
- Merchant and store: contact details supplied to us, Shopify shop identifiers, currency, installation state, settings, plan, and billing status.
- Catalog and inventory: product and variant identifiers, titles, handles, status, tags, product type, vendor, SKU, barcode, price, images, and inventory.
- Orders: order identifiers, timestamps, status, currency, totals, quantities, and product or variant identifiers needed to calculate product performance.
- Meta: the selected ad account and catalog context, product-level spend and delivery metrics, attributed outcomes, and synchronization status.
- Service and support: decisions, notes, confirmed actions, usage, sync and webhook records, security or error logs, and communications sent to us.
How information reaches us
We receive information from merchants, from Shopify when a merchant installs and uses Sned, and from Meta when a merchant authorizes a selected account. Some information is therefore collected indirectly from Shopify or Meta at the merchant's direction.
Providing these connections is optional, but Sned cannot build or maintain its product-level view without them. Disconnecting Meta or uninstalling Sned stops future access from that connection.
Order data is treated as protected customer-related data. Sned's current order model does not intentionally store shopper names, email addresses, phone numbers, postal addresses, payment details, or full customer profiles. Merchants should not place personal or sensitive information in product notes.
How we use information
We do not sell merchant or shopper data, use one merchant's data to provide advertising services to another, or use merchant data for cross-context behavioural advertising.
- Operate and authenticate the Shopify app.
- Connect authorized Shopify and Meta accounts and keep selected data current.
- Match products, calculate metrics, and produce Prune, Preserve, or Protect recommendations.
- Show freshness, coverage, decision, and action history.
- Carry out merchant-requested, supported product actions.
- Manage billing, security, support, troubleshooting, recovery, and legal compliance.
Providers and overseas processing
Sned uses Shopify for installation, APIs, webhooks, and billing; Meta for connected advertising data; Vercel for application hosting; and Neon for managed database infrastructure. We may also use limited providers for email, monitoring, support, and security.
Providers receive only the information reasonably needed for their role. Sned is operated from New Zealand, while providers may process information in other countries. We take reasonable steps to use contractual and technical safeguards appropriate to the information and applicable law.
We may also disclose information where a merchant directs us, where law requires it, or where reasonably necessary to protect Sned, its users, or others.
Security and retention
We use HTTPS, access controls, server-side credential handling, encrypted credential storage, OAuth state checks, webhook verification, and logging designed to avoid exposing secrets. No security measure can eliminate every risk.
Information is retained while needed to provide the service and for legitimate security, audit, billing, dispute, backup, or legal purposes. We delete or de-identify it when it is no longer reasonably required.
Sned's retention policy for detailed Shopify order and line-item records in the active database uses a 90-day age threshold. The Production control applies this policy on a daily cadence: when enforcement is enabled, it deletes detailed records after they cross that age and invalidates dependent product-decision state so it can be recomputed from retained information.
Recovery copies may temporarily contain older or previously erased records. Restores remain isolated and are subject to current retention and verified privacy-request replay before they can be used to serve application traffic.
If a privacy breach has caused or is likely to cause serious harm, we will make the notifications required by the New Zealand Privacy Act 2020 and any other applicable requirements.
Access, correction, and deletion
You can ask whether we hold personal information about you, request access to it, or ask us to correct it. Other rights may apply depending on your location and the circumstances.
We may verify identity and authority over the relevant store before acting. Shoppers should normally contact the Shopify merchant they purchased from so the merchant can submit a verified request through Shopify.
When Shopify sends a verified customer-data request and matching stored order data exists, Sned prepares an encrypted export for the relevant merchant store. The export is available only inside that store's authenticated Sned app for seven days and can be downloaded once. Access ends at seven days. The encrypted copy is removed immediately after download or redaction, or by the next daily deletion run within 24 hours after expiry.
For deletion, disconnecting, or uninstalling instructions, see Data deletion. You can also email hello@snedhq.com.
Contact and changes
Sned is a service operated by Go Above The Line Limited in New Zealand. The privacy contact for the service is hello@snedhq.com. Product support is available at hello@snedhq.com.
If a New Zealand privacy concern is not resolved, you can contact the Office of the Privacy Commissioner.
We may update this statement when Sned, our providers, or applicable requirements change. The current version and update date will remain available here.