Nyan Import Studio privacy notice
Updated 26 October 2026. Nyan Import Studio is operated by Nyan Products, Belgium. For privacy questions or requests, contact nyanproducts@gmail.com.
Information used by the app
We process your shop domain and identifier, store currency, product and variant identifiers, titles, SKUs, barcodes and prices to match supplier rows and prepare changes you approve. Shopify sign-in also provides session information, which can include a staff member's identifier, name, email address, locale and account permissions. Access and refresh tokens are encrypted in the application database.
The app requests product access. It does not request customer or order access. Do not include customer information, payment details or other personal information in supplier files.
Supplier files and price history
Files uploaded in the price-import workflow are parsed in your browser. Requesting a preview sends parsed supplier rows and your selected rules to our server. That workflow does not save the original uploaded file or the full supplier table. Saved reviews contain matched product identifiers, titles, SKUs, original and proposed prices, pricing rules and processing results. Files deliberately attached to a support request are handled separately as described below.
We use these records to show your review, apply selected changes, check for later edits, provide reports and support restoration. Price updates require your confirmation. Exchange rates are entered by you; no automatic exchange-rate service receives your supplier data.
Hosting and service providers
If you choose a BEMS or HEO API connection, your supplier credentials are sent over HTTPS to our server and then to that supplier's official API to read catalogue prices. The connection does not place orders. Credentials remain in the open connection form until you clear them or leave the page; they are not saved in our database, browser profiles or application logs. Supplier rows returned to your browser enter the same review process as uploaded files. BEMS and HEO process these requests under your account with them.
The live app uses Cloudflare for application hosting and request processing. Application records are stored in a separate Neon PostgreSQL database in Frankfurt, Germany. Cloudflare processes requests through its global network. Previous Render and Netlify hosting environments are retained for migration recovery and may retain earlier service logs. Shopify provides authentication, product APIs and the app platform. These services process information needed to operate the app. Service logs may contain your shop domain, request paths, timestamps and error information; application access logs omit URL query strings.
Encrypted recovery copies of application records are stored on an operator-controlled computer and in pCloud. These copies support recovery after data loss. Backup encryption keys are protected separately; pCloud receives encrypted files, not readable application records.
Retention and deletion
Contact and feedback requests include your shop domain, request type, subject, message, optional reply email, supplier name, public documentation link and any sample you choose to attach (up to 512 KB). Messages, replies and attachments are encrypted in the application database. We use them to answer your request and assess supplier connections or import improvements; submitting a request does not authorize product or price changes. Request summaries and support replies are visible to staff using this app in the same store. Do not attach passwords, API keys, customer information or payment data.
Support requests become inaccessible after 30 days and are deleted when the inbox is next accessed or its cleanup command runs. Encrypted backups may retain earlier copies separately. Private operator exports are deleted when the request is resolved. Email correspondence is handled through the support mailbox rather than this in-app retention process.
If you choose AI chat, your messages and recent conversation are processed by a local AI model on an operator-controlled computer. Chat does not send attached support files, product records or other conversations to the model. AI answers are automated and may be inaccurate. The assistant cannot change your store. Please do not include passwords, API keys, customer information or payment data.
Chat messages, replies and processing metadata are saved for support review. Transcripts are encrypted in the application database, and the worker may keep encrypted local copies. Staff using this app in the same store can see its conversation. Chats become inaccessible after 30 days; expired database records are removed on the next chat access or worker check, and local copies on the next worker cleanup. The worker also checks for server-side deletions every 30 minutes while connected; offline computers catch up when the worker next connects. Recovery backups may retain earlier copies separately. Authorized support staff can decrypt a transcript to investigate your question; private exports must be removed when the investigation is resolved.
Unsubmitted previews expire after 30 minutes. Expired previews are removed when another preview is requested, so expiry does not mean immediate deletion from storage. At most 20 open previews are kept per shop.
Submitted history is retained until it is deleted by the operator or an authenticated Shopify shop-redaction notification is processed. The app does not yet automatically delete submitted history after a fixed period. Removing history also removes the app's original-price records used for restoration; downloaded reports remain under your control.
When the app receives Shopify's uninstall notification, it removes stored sessions to stop subsequent authenticated updates. When it receives a shop-redaction notification, it removes that shop's sessions, import history, support requests, chats and processing locks from the application database. Local encrypted transcript and recovery copies may expire separately from the live database; contact us about deletion requests and recovery-copy handling.
Contact and requests
You can download price-change reports from Change history. To request access, correction or deletion of information held by the app, email nyanproducts@gmail.com with your shop domain. We may ask you to verify control of the shop before acting. Do not send passwords, access tokens or payment information.