PowerSync AIVendor Management for Shopify

Privacy Policy

Last updated: June 12, 2026

This policy is written for the Shopify app and SaaS product operated by ENEXSOLUTIONS, LLC. It covers Shopify store and catalog data, supplier-source data, uploaded CSV/XLSX files, AI extraction artifacts, logs, support, mandatory privacy webhooks, and connector permissions. The current submitted release does not require protected customer data, order data, visitor data, or Shopify write scopes.

1. Who We Are

PowerSync AI Vendor Management for Shopify is provided by ENEXSOLUTIONS, LLC. This Privacy Policy explains how ENEXSOLUTIONS, LLC collects, uses, shares, stores, and protects information in connection with PowerSync AI.

The current Shopify review build is a read-only supplier inventory review app. It imports Shopify catalog and inventory data, accepts merchant-uploaded supplier CSV/XLSX files, helps match supplier rows to Shopify variants, and prepares AI PowerSYNC review reports without writing changes back to Shopify.

2. Information We Collect

Merchant workspace information: workspace ID, shop domain, app installation identifiers, selected app settings, free access status, setup status, support messages submitted through the app, and activity needed to operate and secure the workspace.

Shopify store and catalog information: shop domain, store name, Shopify app installation data, access scopes, products, variants, SKUs, barcodes, vendors, product status, inventory item IDs, inventory quantities, inventory locations, product images, catalog import summaries, and related review records.

The current Shopify review build does not require customer, order, fulfillment, checkout, visitor, marketing, or protected customer data to provide supplier file matching and inventory proposal review.

PowerSync AI does not request, read, store, display, export, or use Shopify customer addresses, customer names, customer email addresses, customer phone numbers, customer profiles, or customer records in this release.

Supplier and source information: supplier names, source instructions, uploaded CSV/XLSX files, extracted text, normalized supplier rows, raw evidence from uploaded files, pricing files, lead-time records, field mappings, and review settings.

AI and automation information: AI provider settings, model selection, extraction prompts, normalized rows, confidence scores, SKU match suggestions, explanation text, AI PowerSYNC proposals, proposed Shopify actions, automation policies, manual approvals, report suggestions, generated summaries, and review notes.

Restricted-use review information: when needed to enforce the Terms of Use, we may review product names, supplier rows, categories, vendors, source files, workflow prompts, support messages, audit events, automated screening results, internal review holds, and account activity for signs of prohibited or restricted categories such as alcohol, pork or pork-derived products, gambling products or services, adult products or adult content, illegal goods, controlled substances, weapons, or other restricted activity.

Technical, security, and compliance information: IP address, device and browser details, request logs, error logs, audit events, authentication events, usage activity, permission changes, webhook events, consent or opt-out signals, and records needed to operate, secure, debug, audit, and improve the service.

3. Protected Customer Data And Shopify Privacy Requests

The submitted Shopify review build does not require protected customer data, customer records, order records, or visitor data. PowerSync AI requests only the Shopify scopes needed for catalog, inventory, and location review.

No Shopify customer name, customer email address, customer phone number, billing address, shipping address, customer profile, or customer record field is requested, read, stored, displayed, exported, or used by PowerSync AI in this release.

PowerSync AI provides Shopify's mandatory privacy webhook endpoints for customer data requests, customer redaction requests, and shop redaction requests. If Shopify sends a privacy webhook, ENEXSOLUTIONS, LLC will process the request according to Shopify requirements and applicable law.

If a future feature requires protected customer data, ENEXSOLUTIONS, LLC will update the app permissions, product disclosures, and this Privacy Policy before enabling that feature.

4. How We Use Information

We use collected information to connect Shopify, import catalogs, ingest supplier files, map supplier fields, match SKUs, detect missing or duplicate identifiers, create AI PowerSYNC inventory proposals, show reports, provide support, enforce free access limits, secure accounts, prevent abuse, and improve product reliability.

We use source artifacts and normalized supplier data to help AI detect stock status, quantities, lead times, discontinued products, supplier model numbers, SKU relationships, and operational risk when the merchant requests AI-assisted extraction or reporting.

We may use account, catalog, supplier-source, and workflow information to reject, suspend, discontinue, or cancel workflows or accounts that appear to involve prohibited or restricted product categories under the Terms of Use.

We do not use protected customer data to generate supplier file matching or AI PowerSYNC inventory review reports in the current submitted release.

Shopify-changing actions stay locked as dry-run review records in this release.

5. How We Share Information

We share information with service providers that help us operate PowerSync AI, including hosting, database, logging, support, security, analytics, Shopify APIs, and AI providers when AI extraction is enabled.

We do not sell merchant store data, supplier data, or protected customer data. We do not allow AI providers to use merchant data to train general models unless the merchant expressly authorizes it and the arrangement complies with applicable law and platform requirements.

We may disclose information if required by law, court order, platform security review, fraud investigation, merger or acquisition process, or to protect ENEXSOLUTIONS, LLC, merchants, Shopify, suppliers, or the public.

6. Credentials, Tokens, Supplier Access, And Connected Sources

The current Shopify review build uses Shopify OAuth and merchant-uploaded CSV/XLSX supplier files. It does not launch Gmail, Google Drive, website, dealer portal, PDF, or API feed connectors.

Locked connector options may appear in the UI as coming-soon previews, but they should not request credentials or run OAuth in this submitted release.

Credentials and tokens should be stored using encrypted or managed secret infrastructure and used only to provide merchant-approved workflows. Merchants should not upload any supplier file they are not authorized to use.

7. Data Protection, Access Controls, And Security

ENEXSOLUTIONS, LLC uses administrative, technical, and organizational safeguards designed to protect merchant workspace information and supplier files, including access controls, least-privilege permissions, logging, managed hosting controls, secret-management practices, and separation of production and test workflows where practical.

Sensitive credentials, tokens, and supplier files should be stored using encrypted or managed infrastructure. Backups, logs, and exports are handled according to operational security, legal, audit, and recovery needs.

No system can be guaranteed completely secure. Merchants are responsible for protecting their own devices, Shopify admin accounts, staff permissions, passwords, tokens, supplier credentials, and connected third-party accounts.

8. Retention And Deletion

We retain information while an account is active and as needed for product operation, reporting, support, app functionality, analytics, legal, security, backups, fraud prevention, audit logs, dispute resolution, and compliance.

Merchants may request account closure, data export, or deletion by contacting support@powersyncai.com. Some records may be retained if required for legal, security, backup, or compliance reasons.

9. Customer Privacy Requests And Merchant Responsibilities

Merchants are responsible for maintaining their own customer-facing privacy disclosures, consent settings, cookie or tracking notices, marketing preferences, customer request workflows, and legal compliance for the markets where they operate.

When PowerSync AI receives a Shopify privacy webhook, uninstall event, deletion request, access request, correction request, or other supported privacy request, ENEXSOLUTIONS, LLC will take reasonable steps to respond according to applicable law, Shopify requirements, technical feasibility, and the merchant's instructions.

If we identify a security incident that materially affects merchant data, supplier data, or protected customer data if later authorized, we will take reasonable steps to investigate, mitigate, and notify affected parties when required.

10. International Processing

PowerSync AI may process and store information in the United States and other countries where ENEXSOLUTIONS, LLC or its providers operate. Those locations may have data protection laws different from the merchant's location.

11. Merchant Choices

Merchants can limit data collection by restricting Shopify app permissions where possible, not uploading supplier files, not using optional AI extraction features, and limiting which staff members use the service.

Merchants can uninstall the Shopify app through Shopify and contact support for workspace closure, deletion, or access requests.

12. Children

PowerSync AI is a business software product and is not intended for children.

13. Changes And Contact

ENEXSOLUTIONS, LLC may update this Privacy Policy as the product, Shopify permissions, supplier-source connectors, AI extraction tools, or legal requirements change.

Questions, data requests, privacy concerns, app access questions, and cancellation questions can be sent to support@powersyncai.com.

Copyright (c) 2026 ENEXSOLUTIONS, LLC. All rights reserved.

PowerSync AI Vendor Management for Shopify