Privacy policy
Last updated 2026-10-18. Applies to the Small Gears apps for Shopify and to this website.
Who we are
Small Gears is operated by Raul Tuozzo (NIF 04791273M), Calle del Marqués de Viana 82, 28039 Madrid, Spain. Contact: smallgears.apps@gmail.com.
When a merchant installs one of our apps, the merchant is the controller of their store data and we act as their processor (GDPR art. 28). The terms are in our Data Processing Addendum.
What our apps process
| Data | Why | Kept |
|---|---|---|
| Store domain, plan and install dates | To run the app and its subscription | Until 48 h after uninstall |
| Access token from Shopify (encrypted) | To read the store data the app needs | Deleted at uninstall |
| Shipping Gap Audit: shipping settings, markets, product and variant titles, weights, collections | To find shipping gaps | Findings and snapshots until 48 h after uninstall; audit history: last 30 runs |
We do not read customer or order data in Shipping Gap Audit. If Shopify forwards a customer data request or deletion request, we answer it and keep only the request ID and customer ID as a record, never names, emails or phone numbers.
Store data can include personal data when a merchant is a sole trader (for example a store or location named after a person). We use it only to provide the app.
What we don't do
- No selling or sharing of data, no advertising, no profiling.
- No AI or large-language-model services process your store data.
- No use of data from one store to benefit another.
Where data is stored
On Cloudflare (Workers and D1), our only sub-processor. The database is located in Western Europe. Cloudflare may process data outside the EEA under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Access tokens are encrypted at rest (AES-256-GCM).
Deletion
On uninstall, the access token is deleted at once. Shopify sends a deletion request 48 hours later, and we then erase everything stored for the store, keeping only a record that the erasure happened (store domain and date).
This website
This site sets no cookies, has no analytics and loads no third-party scripts. Our host (Cloudflare) processes technical request data such as IP addresses to deliver and protect the site.
Your rights
You can ask for access, correction, deletion, restriction or portability, and you can object, by writing to smallgears.apps@gmail.com. Customers of a store should contact the store first; we help the merchant answer. You can also complain to a supervisory authority; in Spain, the Agencia Española de Protección de Datos (aepd.es).
Changes
We will update the date above and tell installed merchants about material changes in the app.