01Who we are
OwnBatch is operated by TNL Medikal Sanayi Ticaret Limited Şirketi, registered in Türkiye. Contact [email protected] for privacy questions or [email protected] for account and product assistance.
02Information we process
We process account email addresses, authentication and verification details, account preferences, Shopify shop identifiers and domains, product-access and membership information, subscription and credit records, support communications, operational logs, and actions you authorize in your catalog.
CataBatch processes Shopify product, collection and image information needed for catalog management. It is not intended to request shopper, order or payment-card data for its core catalog features. Merchants remain responsible for personal information they include in their own catalog content.
03Why and on what basis
We use information to create and secure accounts, connect authorized shops, provide selected product features, apply approved changes, calculate credits, prevent misuse, answer support requests and comply with applicable obligations. Depending on the circumstance, processing relies on contract performance, legal obligations, legitimate interests or separately requested consent.
04Services, recipients and international transfers
Cloudflare provides website delivery and security, Supabase supports account authentication, database and backend operations, and Shopify provides authorized shop access and app billing. Service providers may process information in different countries according to their infrastructure and applicable safeguards. We do not claim a specific hosting region without verifying it.
We do not sell personal data. Additional service providers or analytics and advertising tools will be disclosed before they are activated.
05Marketing and browser storage
Product and promotional emails are sent only where there is a valid permission or another applicable legal basis. Marketing permission is optional, separate from account terms, and can be withdrawn through an unsubscribe link or by contacting us.
We currently use essential browser storage for secure sign-in, session continuity and language preferences. Google Analytics, Meta Pixel and similar analytics or advertising tools are not currently active; if introduced, optional tools will be subject to the appropriate consent controls before activation.
06Retention and deletion
Request account or shop-data deletion at [email protected] or [email protected]. Subject to identity verification, applicable Shopify requests and mandatory legal exceptions, account information is removed within 30 days of a valid deletion request. Support requests and operational transaction or audit records are retained for up to 90 days, then deleted or minimized unless a longer period is legally required.
Data required for tax, accounting, dispute resolution, security incidents or another binding legal obligation may be retained only as required and with restricted access.
07Your rights and security
Depending on applicable law, you may request access, correction, deletion, portability, restriction, objection or withdrawal of consent, and you may contact the relevant supervisory authority. We use access controls, account isolation and appropriate technical safeguards; no online service can promise absolute security.
Shopify merchant and customer privacy requests are handled through the applicable Shopify compliance processes where required. A marketing unsubscribe does not disable essential account or security communications.