Privacy policy

Magazina Connector links WooCommerce and Shopify stores to Bilanc.com. It is operated by CodeAPIness shpk, NIPT M12305008A, Tirana, Albania ("we", "us"). This policy explains what data the plugin and the app process, why, where, and for how long. Questions: [email protected].

In short: we process your products, prices, stock and orders so they can be exchanged with your Bilanc account. For orders we can also receive the customer's name and email. You can turn that off (Privacy Mode on WooCommerce, or not granting customer access on Shopify), and then only the customer's Bilanc ID is sent. We never receive payment details. Data is stored on servers in the European Union.

1. Roles

• Merchants (stores that install the plugin or the app): we are the controller of the account and billing data described in section 2.
• Customers of a store: the merchant is the controller. We process their data on the merchant's behalf, only to exchange orders with the merchant's Bilanc account (section 3).
• Bilanc.com is the merchant's own provider, not ours. Data sent to the merchant's Bilanc account is governed by the merchant's agreement with Bilanc.

2. Data about merchants

• Company name, contact email, store URL, store currency, and the server IP address the store reports.
• Platform and version information: WordPress, WooCommerce or Shopify Admin API version, and the plugin or app version.
• The credentials that let us work on your behalf: the WooCommerce REST API key or the Shopify access token, and the address and API key of your Bilanc account.
• Your settings: warehouses, the field that links products to Bilanc items, VAT, exchange rate, price coefficients, update locks and order options.
• Licence and billing: licence dates, or on Shopify the subscription status and plan as reported by Shopify. We never see card or bank details.
• If you register from the WooCommerce plugin: your name, email, store URL and the IP address of the request (to prevent abuse).
• Records of accepting our terms, and an audit log of account changes (what changed, when, and whether it was made by our staff, the plugin or the system).

3. Data about a store's products, orders and customers

Processed on the merchant's behalf:

• Products: product and variant IDs, SKU, the Bilanc link value, Bilanc item ID, and the last price and stock sent to the store.
• Orders: order ID, line items (products, quantities, prices, discounts), totals, currency, status, and the IDs of the documents created in Bilanc (sales order, invoice, return).
• Customer on an order: name and email address, kept with the order. The name is also written as the description of the Bilanc document. The WooCommerce plugin can also send the billing phone and address; we use them only to validate the request and do not store them or pass them to Bilanc.
• Bilanc customer ID of a buyer, if the merchant sets it (WordPress user field or Shopify customer metafield), so the order is booked to the right Bilanc customer.
• The merchant's Bilanc customer list (code, name, email, phone, tax ID, city, address), copied from Bilanc so the merchant can match store customers to Bilanc customers.

With Privacy Mode (WooCommerce) or without the optional customer-data access (Shopify), orders carry only the Bilanc customer ID: no name, email, phone or address. We never process payment details.

4. Why we process data

• To provide the service: update prices and stock, create sales orders, invoices and returns in Bilanc, and import new Bilanc items (performance of the contract with the merchant).
• To manage licences and subscriptions and keep accounting records (contract and legal obligation).
• To provide support and keep the service secure and working (legitimate interest).

We do not sell data, do not use it for advertising, and do not combine data from different stores.

5. This website

This website sets no cookies and has no analytics or tracking. Fonts and images are served from our own server.

6. Service providers

Store data (section 3) is stored only on our servers in Finland, in the merchant's own store, and in the merchant's own Bilanc account.

7. How long we keep data

• While the plugin or app is in use, data is kept so that synchronisation and order history stay correct.
• Shopify: about 48 hours after the app is uninstalled, Shopify sends a data-removal request. We then delete the store's orders, products, customer list, the Shopify access token and the Bilanc credentials.
• WooCommerce: when the plugin is deactivated, synchronisation stops and the data is kept so it can resume. Write to us to have it deleted.
• Merchant account, licence and billing records, terms acceptances and the audit log are kept as long as accounting and legal obligations require.
• Documents created in Bilanc belong to the merchant and are not affected.

8. Customer privacy requests

• Shopify forwards customer requests automatically. For a data request we email the store owner what we hold about that customer. For an erasure request we remove the customer's name and email from the store's orders.
• WooCommerce: the merchant can write to us and we will export or remove a customer's data.

Customers should contact the store first: the store is in charge of their data. Merchants can contact us at [email protected].

9. Security

All traffic uses HTTPS. API keys and access tokens (your Magazina Connector key, your store's key or token and your Bilanc key) are stored encrypted. Store and Bilanc credentials are used only to connect on your behalf and are shown masked to our staff. Each store's data sits in its own database schema. Only authorised staff with role-based access can see store data, and account changes are logged.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to complain to a data protection authority. In Albania that is the Information and Data Protection Commissioner (IDP).

11. Changes

We will update this page when our data use changes and change the date at the top. For significant changes we will notify merchants in the plugin, in the app or by email.

Contact

CodeAPIness shpk, NIPT M12305008A, Tirana, Albania · [email protected]