WooFerry — Privacy Policy & Data Processing Terms

Effective 5 October 2026

WooFerry ("we", "the App") is a Shopify-embedded app that migrates a merchant's existing WordPress/WooCommerce store — products, images, collections, and customers — into their Shopify store. This page explains what personal data we process, why, how long we keep it, and how a merchant or their customers can request its deletion.

Who this applies to

This policy covers two groups: the merchant who installs WooFerry, and that merchant's customers, whose records may be copied from WooCommerce into Shopify as part of a migration the merchant initiates. For the data covered here, the merchant is the data controller of their own store's data; WooFerry acts only as a data processor, processing data solely to carry out the migration the merchant requests and for no other purpose.

What data we process

From the merchant's Shopify store, via the access scopes granted at install, limited to what the migration needs:

• Product, inventory, and location data, to write migrated products and stock levels.
• Customer records (name, email, phone, billing/shipping address), to write migrated customers.

From the merchant's WordPress/WooCommerce site, via credentials the merchant supplies through WooCommerce's own REST API authorization flow (no WordPress plugin is installed):

• Products, images, and categories.
• Customer records: name, email, phone, and billing/shipping addresses.

We never read or transmit customer passwords. WooCommerce's customer API does not expose password hashes, so there is nothing to carry over — migrated customers instead receive a standard Shopify account-invite email, which the merchant triggers after reviewing the import.

Why we process it

Solely to perform the one-time migration the merchant requests: reading the merchant's existing store data, transforming it into Shopify's data model, and writing it to the merchant's own Shopify store. We do not use this data for advertising, analytics profiling, or any purpose unrelated to the migration, and we do not sell or rent personal data to third parties.

How we store and protect it

• Shopify access tokens and WooCommerce API credentials are encrypted at rest (AES-256-GCM) and stored per-merchant, isolated from every other merchant's data.
• Migrated customer and product records are stored only long enough to run the migration, track its progress, and prevent duplicate imports if a merchant re-runs it.
• Access to any merchant's data is scoped strictly to that merchant's own records — there is no cross-merchant access.

How long we keep it, and deletion rights

We support Shopify's mandatory data-protection webhooks:

• Customer data request — on request, we log what data (if any) we hold about a specific customer, for the merchant to act on.
• Customer redact — permanently deletes the migrated records for a specific customer.
• Shop redact — on uninstall (or request), permanently deletes everything we hold for that merchant, including all migrated customer data and stored credentials.

A merchant or one of their customers who wants data deleted or wants to know what is held should contact the merchant directly, or reach us at the address below.

Contact

Questions about this policy or a data-protection request: george.hadjisavva@avocadots.com

Changes to this policy

If this policy changes, the effective date above will be updated. Continued use of the App after a change constitutes acceptance of the revised policy.