This privacy policy describes how Pontaluna ("we", "us") processes data when you install and use Pontaluna: ClickUp Sync (the "App") on your Shopify store. Pontaluna is operated by Arthur Audebrand (EI), France. Contact: support@pontaluna.com.
When you install the App, we store your shop domain and the API access tokens required to operate the App. To provide the App's core function — turning Shopify orders into ClickUp tasks — we process order data only: order number and ID, line items and quantities, order totals and currency, order tags, sales channel, and order status (paid, fulfilled, cancelled, refunded), together with timestamps.
We do not collect, store, or transmit customer personal information. Customer names, email addresses, physical addresses, and phone numbers are not requested from Shopify, are not stored in our systems, and are not sent to ClickUp. Tasks created in ClickUp reference orders by number and link back to the order in your Shopify admin.
Order data is used exclusively to create and update tasks in the ClickUp workspace you connect, according to the settings you choose. We do not use your data for advertising, profiling, or training purposes, we do not sell it, and we do not share it with any third party other than those listed below.
Data is transmitted to ClickUp (as instructed by you, into your own ClickUp workspace) and hosted on our infrastructure provider's servers located in the European Union. All data is encrypted in transit (TLS 1.2+) and at rest. API access tokens are stored encrypted.
We retain order synchronization records only as long as needed to operate the App. When you uninstall the App, all data related to your store — including access tokens and synchronization history — is permanently deleted from our systems within 30 days. Tasks already created in your ClickUp workspace belong to you and are not affected.
We comply with Shopify's mandatory privacy webhooks: customers/data_request (we hold no customer personal data and respond accordingly), customers/redact, and shop/redact (full deletion of shop data).
If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, export, or delete the data we hold about your store, and the right to lodge a complaint with your supervisory authority. To exercise these rights, contact support@pontaluna.com — we respond within 30 days.
Access to production systems is restricted to the operator of Pontaluna, protected by strong authentication. Secrets are stored outside the codebase. Application logs do not contain personal information. In the event of a security incident affecting your data, we will notify you without undue delay.
We may update this policy as the App evolves. Material changes will be announced in the App's settings page. The current version is always available at this address.