Privacy Policy - Best Seller Collections

Last Updated: April 24, 2026

Data Controller

Grupo IO Ecommerce S.L., with Tax ID B21822408 and registered address at Calle Eduardo Morales, 32, 2ºA – 28025, Madrid (Spain), is the data controller responsible for the processing of personal data collected through the Best Seller Collections Shopify application. You can contact us at:

info@migraciones.io.

1. Purpose of Data Processing

We process data for the following purposes:

Manage the technical and administrative relationship arising from the installation and use of our Shopify application.
Create, update, activate, deactivate, and delete best seller collections configured by the merchant.
Calculate product rankings based on the merchant’s selected criteria, such as units sold, revenue, profit, sales window, and product limits.
Synchronize Shopify collections with the products that meet the merchant’s configured ranking rules and exclusions.
Read and process Shopify product, collection, and order data required to determine which products are eligible for inclusion in managed collections.
Store collection configuration, synchronization status, snapshots, and related operational data needed to keep the app functioning correctly.
Respond to support requests and provide technical assistance.
Improve app functionality, stability, and security based on service usage and technical diagnostics.
Send service-related communications such as updates, maintenance notices, and security alerts.

The data provided will not be used for purposes other than those described without an appropriate legal basis.

2. Legal Basis

The legal basis for processing your data is:

Performance of a contract or pre-contractual measures when you install and use the app.
The merchant’s configuration and use of best seller collections, ranking rules, exclusions, and synchronization settings within the app.
Legitimate interest of Grupo IO Ecommerce S.L. for service improvement, fraud prevention, technical support, and security monitoring.
Compliance with applicable legal obligations, including tax, commercial, and data protection regulations.

3. Data We Collect

3.1 Store and App Data

When you install and use the app, we may process information related to your Shopify store, such as:

Shop domain, app installation status, and basic store configuration.
Product, variant, collection, vendor, tag, inventory, image, and publication data needed to build and maintain best seller collections.
Order and sales-related data required to calculate product rankings, including quantities sold, revenues, and other ranking inputs made available through Shopify.
Product cost data, where available through Shopify, when the merchant uses profit-based ranking.
Collection configuration data, including sales window, sync frequency, ranking metric, product limits, exclusions, and activation status.
Technical usage information, logs, and error diagnostics needed to operate and secure the service.

3.2 Limited Customer-Related Data

The app may process limited customer-related or order-related information only insofar as it is made available through Shopify and is necessary to evaluate sales performance or ranking eligibility. We do not intentionally collect or store payment card data.

4. Data Recipients

Data may be shared only when necessary:

Shopify Platform: Through official Shopify APIs and related services to read store data and create, update, and synchronize collections.
Technology Providers:
- Vercel (hosting and infrastructure services).
- Neon (PostgreSQL database infrastructure).
Legal obligation: Where disclosure is required by law or necessary to protect legal rights.

Where international data transfers occur, they are carried out subject to appropriate safeguards under applicable data protection law.

5. Data Retention

During app use: We retain the data necessary to provide the app’s functionality while the app remains installed and active for the merchant.
After uninstall: Store-specific data may be deleted after uninstall, subject to reasonable technical, legal, tax, security, and dispute-resolution retention needs.
Technical logs: Diagnostic and security logs may be retained for a limited period where necessary to maintain and protect the service.

6. User Rights

You may exercise your rights of access, rectification, erasure, restriction, objection, and data portability, where applicable, by contacting info@migraciones.io and providing proof of identity or proof of ownership or administration of the relevant store.

You may also file a complaint with the Spanish Data Protection Agency: www.aepd.es.

7. Security Measures

Encryption of data in transit using TLS/SSL.
Use of Shopify authentication mechanisms, including OAuth and session-based app access controls.
Controlled access to app infrastructure and databases.
Monitoring, logging, and technical review intended to detect and address service issues and security risks.

8. Cookies and Storage

The application uses essential authentication and session-related mechanisms necessary for merchant access and embedded app functionality. We do not use storefront advertising cookies through the app.

9. Contact Information

Email: info@migraciones.io
Postal Address: Grupo IO Ecommerce S.L., Calle Eduardo Morales, 32, 2ºA – 28025, Madrid, Spain
Shopify App: Best Seller Collections