Privacy Policy — Kizing

Legal details from Tin (Desk #256, 2026-11-08). Set the date below to the Shopify submission day. Last updated: 8 November 2026

Kizing is operated by Trần Trung Tín (sole trader) ("Kizing", "we", "us") and publishes a family of apps for Shopify stores. This policy covers every Kizing app, the Kizing website and support. Section 3 says, app by app, exactly what each one reads, what it keeps, why, and for how long.

It applies to merchants who install a Kizing app ("you") and to the buyers whose orders pass through one.

Kizing is independent. It is not made, endorsed or operated by Shopify, TikTok, bol, Kaufland or any supplier you connect.

1. Who is responsible

• Merchant account data (your store, your settings, your support messages): we are the controller.
• Buyer data in your orders: you are the controller. We process it only on your instructions, to run the app you installed.

Contact: Kizing (operated by Trần Trung Tín, sole trader), 2261 Market St, Suite 2611, San Francisco, CA 94114, USA, hello@kizing.com. EU/UK trader details: the same name and address.

2. What every Kizing app does

These apply to all apps in section 3.

From Shopify, when you install: your store's domain, name, contact email, country, currency, language and plan, plus the login session Shopify gives the app (the name and email of the staff member who opens it).

We keep in our database:

• Links between your products and the other side (variant ids, SKUs, listing ids), and your settings.
• A stock ledger: each stock change the app made, with the SKU, the amount and what caused it (an order id, a feed run).
• Sync logs: what ran, when, and whether it worked. 30 days.
• Drift findings (where two sides disagree). 90 days after they are resolved.
• Background jobs. 7 days after they finish.
• In-app alerts and your alert settings (email address; Slack webhook URL, encrypted).

Buyer personal data is not stored. Where an app handles orders, the buyer's name, address, email and phone are held in memory only while the order is written into your Shopify store, then dropped. Our tables keep order ids, not people. Logs are filtered to strip emails, phone numbers, addresses and secrets.

We never sell personal data, use it for advertising, or use your data or your buyers' data to train AI models.

3. App by app

Bundle & Kit Stock

• Reads from Shopify (read_products, read_orders, read_locations; writes write_inventory): products, variants, SKUs and stock levels by location; the line items and quantities of new, cancelled and refunded orders.
• Writes to Shopify: stock levels of bundles and their components.
• Keeps: your bundle definitions (which variants a kit contains, and how many), the stock ledger, logs, drift and alerts (section 2).
• Why: to keep a kit's stock equal to what its components allow, and to take components out of stock when a kit sells.
• Buyer data: order notifications from Shopify include customer details; the app reads only line items and quantities and stores none of the customer details.
• AI (optional): during setup, to suggest which products a kit contains, the app can send product titles, SKUs and variant ids to Anthropic's API. Never buyer data. You confirm every suggestion.

Supplier Stock Feeds

• Reads from Shopify (read_products, read_locations; writes write_inventory): products, variants, SKUs, barcodes and stock levels by location.
• Reads from your supplier: the stock file you point it at (CSV, XLSX, XML, JSON or ZIP), by URL, FTP, SFTP, upload, or email to the feed's own inbound address. From emails it keeps only attachments that look like feeds.
• Writes to Shopify: stock levels, and cost if you turn that on.
• Keeps: the feed's connection details (URL or host, user name, password or key; encrypted), your column mapping and rules, a fingerprint of the last file, the setup sample (up to 8 MB, so the dry run uses exactly what you reviewed), the stock ledger, logs, drift and alerts.
• Why: to fetch the supplier's stock on your schedule and update your store, with the guards you set.
• Buyer data: none. This app does not read orders.
• AI (optional): if you turn on suggested mapping during setup, the app sends the file's column headers and up to 8 sample rows (each value cut to 60 characters) to Anthropic's API to suggest which column is SKU, quantity and so on. Supplier files hold product data, not buyer data. You review the mapping before anything goes live.

bol & Kaufland Sync

• Reads from Shopify (read_products, read_fulfillments, read_locations; writes write_inventory, write_orders, write_merchant_managed_fulfillment_orders, write_returns): products, SKUs, barcodes, stock levels, fulfillments and tracking, cancellations and refunds.
• Reads from bol and Kaufland: your offers and stock, orders (line items, prices, the buyer's name, shipping address, email and phone), shipments and returns.
• Writes: stock and tracking to bol and Kaufland; marketplace orders, cancellations and returns to Shopify.
• Keeps: your bol and Kaufland API credentials (encrypted), offer-to-variant links, order-id pairs (marketplace order id and Shopify order id, so an order is never created twice) and their status, the stock ledger, logs, drift and alerts.
• Why: to keep stock in step and to bring marketplace orders into Shopify so you can ship them.
• Buyer data: written into the Shopify order and not stored by us (section 2).
• AI: none.

TikTok Shop Sync (not yet available)

This app is waiting for TikTok's partner review. It is not offered yet; this section describes how it will work.

• Reads from Shopify: products, variants, stock levels, orders, fulfillments, returns and locations (the scopes shown at install).
• Reads from TikTok Shop: shop id, name and region; access and refresh tokens; products, SKUs, warehouses and stock; orders including the buyer's name, address, phone and email; packages and tracking; returns.
• Keeps: TikTok tokens (encrypted), SKU and warehouse links, order-id pairs, last pushed stock, the stock ledger, logs, drift and alerts. No finance, payout, affiliate or analytics data is requested.
• Buyer data: written into the Shopify order and not stored by us (section 2).
• AI (optional): during setup, to suggest matches between TikTok SKUs and Shopify variants, pick categories and explain the setup scan, the app can send product and SKU titles, SKUs and ids to Anthropic's API. Never buyer data. You approve every match.
• If you disconnect Kizing in TikTok: sync stops, tokens are erased at once and all data synced for that TikTok shop is deleted.

Other apps in the family

New Kizing apps get their own section here before they launch.

4. How we use data

• To run the app you installed, as described above.
• To check both sides for drift and alert you.
• To answer support, including through AI support agents acting for us, with people reviewing escalations.
• To secure the service, prevent abuse and fix bugs.
• To meet legal obligations.

Legal bases (EU/UK): performance of our contract with you; our legitimate interest in securing and improving the service; legal obligation; and, for buyer data, your instructions as controller.

5. Who we share it with

Current list of subprocessors: https://kizing.com/subprocessors.

6. How long we keep it

When you uninstall an app: sync and billing stop, queued jobs are cancelled, and credentials and sessions are erased at once. Shopify then sends a shop/redact request (about 48 hours later) and we delete every row we hold for your store. If that request never arrives, we delete everything 30 days after uninstall anyway. Reinstalling before then cancels the deletion.

7. Shopify privacy requests

Every Kizing app handles Shopify's mandatory privacy webhooks, each verified before use:

• customers/data_request: we compile what we hold that relates to the buyer (order-id pairs, sync events, any other mention) and give it to you to pass on.
• customers/redact: we delete sync logs about the buyer's orders and replace their email or phone, wherever it appears, with "(PII)". The order-id pair stays so the order is never imported twice; it holds no personal data.
• shop/redact: we delete all your store's data (section 6).

8. Security

• Encryption in transit (TLS) and at rest. Tokens, marketplace credentials, feed passwords and Slack URLs are encrypted again inside the app (AES-256-GCM, keys held in a secrets manager).
• Every webhook from Shopify and TikTok is signature-checked before it is read.
• Every query is limited to the shop that made the request.
• Production access is limited to named staff with multi-factor authentication.
• If a breach affects your data, we tell you without undue delay and within 72 hours of confirming it.

We hold no security certifications.

9. International transfers

Data is stored in the United States. Where data leaves the EU/UK (to our servers in the United States, or to our AI provider), we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

10. Your rights

Everyone: ask us to access, correct, export or delete your data by writing to hello@kizing.com. We answer within 30 days.

EU/UK (GDPR): you can also object to or restrict processing, and complain to your data protection authority.

California (CCPA/CPRA): you can know, delete and correct personal information, and you won't be treated differently for asking. We do not sell or share personal information for cross-context advertising.

Buyers: your data reaches us through the shop you bought from. Contact the shop first; we help them answer, and Shopify's privacy requests reach us automatically.

11. This website

This website measures visits without cookies. Our own analytics script records the page, the referring site and campaign tags, and counts a visitor with a one-way hash of the day, IP address and browser that can't be linked across days. The raw IP address is never stored, nothing is shared with advertisers, and there is no cookie banner because there are no cookies.

12. Children

Kizing apps are business tools and are not directed at children.

13. Changes

We post changes here. For material changes, we tell you in the app or by email at least 14 days before they take effect.