Privacy Policy: Gelato Sync

Gelato Sync ("Gelato Sync", "we", "us") is an app for merchants who run stores on the OpoShop platform. It connects your store to YOUR OWN Gelato account, adds products you already designed in Gelato to your store, and lists the orders for those products. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to the Gelato Sync admin application and its background order checks.

The short version. Gelato Sync reads your store's orders so it can list the ones that contain your Gelato products. Your designs stay in Gelato: we store no artwork and no print files. We never collect or store payment-card numbers. We never sell your data or your customers' data. Sending orders to Gelato automatically is not switched on yet, so today Gelato Sync does not place Gelato orders for you. If that changes, a real Gelato order will still only be placed after you explicitly turn live ordering on.

1. Information we collect

Store and account data

When Gelato Sync is installed on your store, we receive your store identifier, subdomain, store name, and owner email from the OpoShop platform, plus an access token used to read orders and push tracking back on your behalf. We create an account record so you can sign in to the Gelato Sync dashboard.

Order and fulfillment data

Orders placed in your store: order number, line items and quantities, and the shipping address your customer provided (name, address, and contact details needed to fulfill and ship the order).
The list of products you added from Gelato (which OpoShop product option matches which Gelato product option), the Gelato mockup image address for each, and the prices and margin you set. We do not store your artwork or print files.
Order records: the status of each order in Gelato Sync and, if an order is sent to Gelato, the Gelato order id, tracking number, carrier and timestamps.

Gelato connection

You connect your own Gelato account in Setup. We store the Gelato API key you provide, encrypted at rest, so the app can read your Gelato products and, when order sending is switched on, place and track orders on your behalf. It is stored server-side, is never shown back in the interface once saved, and is never written to a log. Today Gelato Sync does not place Gelato orders, so it does not cause your Gelato payment method to be charged. When you disconnect Gelato or uninstall the app we delete the stored Gelato key.

Payment card data

We do not collect or store payment-card numbers, bank details, or passwords. Customer payments are processed by OpoShop and its payment providers; supplier payments are handled by Gelato through your own Gelato account. Gelato Sync never touches raw card data and never handles your customers’ payments.

Product analytics

We use privacy-respecting product analytics to understand feature usage and fix problems. We do not sell personal data and we configure analytics to avoid collecting unnecessary personal information.

2. How we use information

To detect new orders for your Gelato products and list them for you. When order sending is switched on: to place the order on Gelato (which sends the buyer's name and shipping address to Gelato), read the tracking number, and mark the order shipped in your store.
To add the products you choose from your Gelato store to your OpoShop store.
To provide the admin dashboard and its safety checks, support you, and secure the service.
To comply with legal obligations.

3. Sharing

We share data only with: (a) the OpoShop platform your store runs on, as needed to operate the app; (b) Gelato, to read your products and, when an order is sent to Gelato, to place and track it (including the shipping details required to deliver the order); (c) infrastructure providers that host Gelato Sync under confidentiality obligations; and (d) authorities where required by law. We do not sell your data or your customers' data.

4. Data retention and deletion

We keep order, mapping, and fulfillment data for as long as Gelato Sync is installed on your store, so your fulfillment history stays accurate.

When you uninstall Gelato Sync, we permanently delete your stored Gelato API key as soon as OpoShop confirms the app has been removed, and we stop reading your store's orders. We deliberately keep your product list and order history, so that reinstalling restores them rather than starting you from nothing. To have that history deleted too, email us and we will remove it.

5. Security

Data is transmitted over TLS. Access tokens and your Gelato API key are stored server-side, and the key is encrypted. Every request is scoped to the authenticated store. A Gelato order can never be charged without your explicit choice.

6. Children

Gelato Sync is a business tool and is not directed to children under 13.

7. Changes

We may update this policy; we will revise the "Last updated" date above when we do.

8. Contact

Questions about this policy or a data request? Email brandon@tryfound.io.