GDPR, CCPA & DPDP COMPLIANT

Privacy Policy for FIT Inventory Sync

Effective Date: January 1, 2026 • Last Updated: October 2026 • Application Slug: inventory-sync

1. Introduction & Scope

This Privacy Policy describes how FIT Apps ("we", "us", or "our") collects, processes, stores, and protects merchant and customer data when you install or use the FIT Inventory Sync application on your e-commerce store.

2. API Scopes & Information We Access

To deliver its core functionality (Store-to-store sync, automated supplier feeds & bulk CSV.), FIT Inventory Sync requests only the minimum required API permissions:

3. Mandatory GDPR & Privacy Webhooks

FIT Inventory Sync implements and verifies all mandatory privacy webhooks using HMAC-SHA256 cryptographic validation:

4. Infrastructure Security & Data Retention

All data transmitted by FIT Inventory Sync is encrypted in transit via TLS 1.3 and encrypted at rest (AES-256) on Google Cloud Run infrastructure. We never sell, rent, or monetize merchant or buyer data.

5. Data Protection Officer & Contact

For privacy inquiries, data subject access requests (DSAR), or security audits regarding FIT Inventory Sync, contact our Data Protection Officer at support@fit-apps.dev.