Privacy policy

Who operates Batvio

Operator: Liam Clark
Contact address: 1615 Stoney Run Drive, Wilmington, DE 19803, United States

Privacy requests: [email protected]
Product support: [email protected]

Information the app uses

Batvio is a product bulk editor. It uses the shop domain and identifier, currency, time zone, authorized staff identifier and permissions, and the product or variant fields needed to prepare and carry out the merchant’s edits. It stores saved rules, job history, before-and-after snapshots, and app subscription status.

Shopify authorization sessions and access credentials are held on the server; access and refresh tokens are encrypted in the database. Batvio does not request access to customer records, orders, payment card details, inventory, or themes. Merchants should avoid including personal information in product content or uploads.

How information is used

Information supports authentication, product previews, confirmed edits, schedules, conflict checks, undo history, billing eligibility, support, and security recovery. Batvio does not use AI services to process merchant data. It does not include advertising trackers or sell merchant information.

Service providers and hosting

Shopify provides app authentication, product APIs, and app billing. The selected hosting provider is DigitalOcean. Hosting region: New York City, United States (DigitalOcean NYC).

Uploaded CSV bytes are validated in memory and discarded after preview creation. Batvio retains only bounded source metadata and the fixed resource and before-and-after snapshots needed for review, confirmation, conflict checks, and undo.

Retention and deletion

Product change snapshots follow the selected plan’s retention period. Raw CSV uploads are not retained after preview creation. Job metadata, saved rules, and subscription records can remain until shop-data deletion; snapshot expiry does not delete the entire job.

A verified uninstall event stops new writes, requests cancellation of outstanding jobs, and removes stored Shopify sessions. A verified shop-data redaction event then removes the matching uninstalled shop’s records. Ambiguous or stale events are held for review so that a newer installation is not deleted accidentally.

When shop data is deleted, Batvio retains a pseudonymous record of the deleted installation for 90 days to help prevent that data from being restored accidentally. This record does not contain the shop domain.

The operator makes encrypted database backups manually for release and recovery work. Encrypted backup copies are retained for seven days on an access-restricted, operator-controlled workstation. Daily automated backups are not provided. Temporary restore copies are isolated from live traffic and remain restricted during validation and cleanup. Recovery depends on access to the workstation and recovery keys.

Restored data must be checked against the operator’s separate deletion records before the service accepts traffic.

Requests and choices

Contact the privacy address above to request access, correction, or deletion of information held by the operator. Include your shop domain; never send access tokens or passwords. You can pause product writes inside Batvio or uninstall the app in Shopify. Shopify also forwards mandatory privacy requests to the app.

Policy changes

The operator will update this page and its effective date when data handling changes. Material changes must be communicated through the published support channels.