Privacy policy

Effective from 1 September 2026

Who we are

The add-ons are operated by Apptiary s.r.o., Tylova 1043/15, 831 04 Bratislava, Slovakia, Company ID 57 466 408 ("we"). Contact: [email protected].

Whose data we process

E-shop operators (our customers) and their contact persons.

End customers of the e-shop (buyers) – solely within the scope of data the Shoptet platform sends us in an order notification, and only for the purpose of triggering the notification. Here we act as a processor for the e-shop operator.

What data and why

E-shop operators: the e-shop identifier and URL, a contact e-mail (service notices, for example that a channel stopped working), Shoptet API access credentials provided by Shoptet, the channel settings you enter (webhook addresses, chat identifiers, recipient e-mail addresses, your e-mail service API key), and notification delivery records (time, event type, order number, result).

Buyers: from the order notification we process the order number, total amount and currency, item count, payment and shipping method, status and payment flag. The buyer’s first and last name appears in the message text only if you explicitly enable it for the given channel; even then we do not store it. Other data (address, e-mail, phone, items) is removed immediately after processing.

Legal basis: performance of the contract with you (Art. 6(1)(b) GDPR); for operational and security records our legitimate interest (Art. 6(1)(f) GDPR).

Where and for how long

Data is stored in the EU (Hetzner Online GmbH, Helsinki data centre, Finland). Access tokens and channel settings are encrypted in the database (AES-256-GCM). Communication is HTTPS-only; notifications from Shoptet are verified by signature.

The technical envelope of a received event (event, e-shop and order identifiers) is kept for 7 days to protect against duplicate processing. Notification delivery records for 30 days. After uninstalling the add-on we stop notifications immediately and delete all e-shop data within 30 days.

Who we share data with

We send notifications exclusively to the services you choose and manage (Slack, Discord, Telegram, Microsoft Teams, Google Chat, Google Sheets, ntfy, your e-mail service, your webhook). You are responsible for the terms of these services as their user.

Other processors: Hetzner Online GmbH (hosting, EU), Functional Software, Inc. – Sentry (error tracking, EU region, no personal data). We do not provide or sell data to anyone else.

Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection. Write to [email protected]; we will reply within 30 days. You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

Cookies

This site uses no cookies and no third-party analytics. The add-on settings inside the CMS administration use only the technical session data necessary for signing in.