Who is responsible
WZM Technologies EURL, publisher of Mecaparts, is responsible for the processing described here. For any question or request about your data, write to contact@mecaparts.app.
What this policy covers
- The website mecaparts.app, including the blog, the documentation and the contact and audit forms. It is hosted by Vercel.
- The Mecaparts PRO Shopify app, installed from the Shopify App Store. Its servers and database are hosted by Fly.io in Paris (European Union).
- Projects and services we deliver on a quote.
When we build or run a store for you, you remain responsible for your own customers’ data; we act on your instructions for that data.
Data collected on the website
- Contact and audit formsName, email, company, store address, platform, market and your message. Sent to our mailbox by email through Resend; used only to answer you and prepare a quote.
- EmailsMessages you send to contact@mecaparts.app, received in our Google Workspace mailbox.
- Server logsIP address, browser, pages requested and time, recorded by Vercel to deliver the site and protect it from abuse.
- Audience measurementVercel Web Analytics counts page views without cookies and without identifying you. Google Analytics runs only if you accept analytics cookies.
- FontsFonts are loaded from Google Fonts, which receives your IP address when the page loads.
Data processed by the Shopify app
- Store and accountShop domain, and the name, email and language of the staff member who opens the app, as provided by Shopify.
- Access tokensThe access token Shopify issues to the app, used to manage your products.
- SettingsLanguage, country, enabled vehicle searches, and your TecDoc provider ID and API key.
- ImportsThe files you import (article numbers, manufacturers, prices, quantities) and their results, so you can follow and fix imports.
- Billing recordsPlan and usage records, needed to bill usage through Shopify.
- Import reportsEmails we send you with the results of bulk imports, sent from our Google Workspace mailbox.
- Storefront searchesVehicle queries from your storefront (make, model, engine, VIN, KBA or registration) pass through the app to return results. They are not linked to your customers’ identity.
The app does not request access to your customers, orders, checkouts or payments. Your products and their fitment data are stored in your Shopify store, not in our database.
Why we use it
| Purpose | Legal basis |
|---|---|
| Provide the app and the features you enable | Performance of the contract |
| Send import reports and service emails | Performance of the contract |
| Answer your messages and prepare quotes | Steps at your request before a contract |
| Bill usage through Shopify and keep accounting records | Legal obligation and performance of the contract |
| Keep the website and the app secure, and fix problems | Legitimate interest |
| Measure the website’s audience with Google Analytics | Your consent, which you can withdraw at any time |
We do not sell personal data and we do not use it for advertising.
How long we keep it
| Data | Kept for |
|---|---|
| App settings, credentials and account data | While the app is installed; deleted when you ask us, after uninstalling |
| Import history | While the app is installed; deleted when you ask us, after uninstalling |
| Billing records | As long as accounting law requires |
| Form submissions and emails | As long as needed to follow up the exchange, then deleted unless they relate to a contract |
| Server logs | A short period, to diagnose incidents and abuse |
| Google Analytics data | Up to 14 months |
Who processes it with us
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Website hosting, server logs, cookieless audience measurement | United States, global network |
| Shopify | App distribution, authentication, billing | Canada, global |
| Fly.io | App servers and database | Paris region (European Union) |
| TecAlliance | TecDoc data, through your own licence | Germany (European Union) |
| Email (Google Workspace), fonts, and Google Analytics if you consent | United States, Ireland | |
| Resend | Delivery of the website’s contact and audit forms to our mailbox | United States |
| Contentful | Blog content management | European Union, United States |
| Instatus | Public status page | — |
Where a provider processes data outside the European Union, transfers rely on the safeguards that provider offers, such as the European Commission’s standard contractual clauses or an adequacy decision.
Security
- HTTPS on every request, for the website and the app.
- TecDoc credentials stay on the server: they are never sent to the browser.
- Access to the app is through Shopify’s authentication, scoped to your shop.
- The app requests only the Shopify permissions it needs, listed on the trust page.
Shopify privacy requests
The app is subscribed to Shopify’s mandatory privacy webhooks: customer data request, customer redact and shop redact. As the app stores no data about your customers, customer requests have nothing to return or erase on our side. To have your shop’s data deleted after uninstalling, write to contact@mecaparts.app; we do it within 30 days.
Your rights
Depending on the law that applies to you, you can ask to access, correct or delete your data, object to or restrict its use, receive it in a portable format, and withdraw your consent at any time without affecting earlier processing. Write to contact@mecaparts.app; we answer within 30 days. You can also complain to the data protection authority of your country.
Changes
We will update this page when our processing changes, and change the date at the top. Material changes for app users are also announced by email.