Privacy Policy

Effective date: April 1, 2025 · Last updated: April 1, 2025

1. Who We Are

VariantBridge ("we", "our", "us") is a SaaS platform that enables Shopify store operators to create secure operational bridges between two Shopify stores. Our service is accessible at variantbridge.com.

2. What Data We Collect

Account data:

We collect your full name, email address, and password (hashed) when you create an account.

Billing data:

We collect tax identification information (CPF/CNPJ) and address for invoicing purposes only. We do not store credit card numbers or payment instrument data.

Store connection data:

When you connect a Shopify store via OAuth, we store:

  • The store domain (e.g. yourstore.myshopify.com)
  • The OAuth access token provided by Shopify
  • The Client ID you provide

We do NOT store, read, or transmit:

  • Your products, variants, or inventory
  • Your customers or customer data
  • Your orders or transaction history
  • Any other store data beyond what is strictly necessary to maintain the connection

Variant mapping data:

The variant mapping you create manually inside VariantBridge (linking a storefront variant ID to a checkout variant ID) is stored in our database and in our secure file storage. This data belongs entirely to you.

Usage data:

We collect basic usage analytics (pages visited, actions performed) to improve the platform. This data is anonymized and not sold to third parties.

3. How We Use Your Data

  • To provide and maintain the VariantBridge service
  • To authenticate your identity and manage your account
  • To process invoices and comply with fiscal obligations
  • To send transactional emails (account approval, password reset, payment notices)
  • To improve our platform based on anonymized usage patterns

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage and Security

Your data is stored on secure infrastructure with:

  • Encrypted connections (TLS/HTTPS at all times)
  • Row Level Security (RLS) — your data is only accessible by your authenticated account
  • OAuth tokens are stored encrypted and never exposed in the frontend

5. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, your personal data, store connections, and variant mappings are permanently deleted within 30 days.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and all associated data
  • Export your variant mapping data at any time via the CSV export feature

To exercise these rights, contact us at: privacy@variantbridge.com

7. Third-Party Services

VariantBridge uses the following third-party services:

  • Supabase — database, authentication, and file storage
  • Shopify — OAuth authentication for store connections
  • Cloudflare — DNS and domain security

Each of these services has their own privacy policy governing their data practices.

8. Changes to This Policy

We may update this policy periodically. We will notify you by email and by posting the updated policy on this page with a new effective date.

9. Contact

VariantBridge
Email: privacy@variantbridge.com
Website: variantbridge.com