Privacy Policy

Last updated: May 30, 2026

This Privacy Policy explains how Kamko BV ("we", "us", "our") collects, uses, and protects information in connection with Siftori (the "Service"), a Shopify app for sorting collection products. It applies to merchants who install Siftori on their Shopify store.

1. Information we process

To operate the Service, we process the following categories of data:

• Store identifiers: your Shopify store domain and access tokens issued by Shopify, used to authenticate API calls.
• Product and collection data: product IDs, titles, prices, inventory levels, publishedAt timestamps, and collection memberships — required to compute sort order.
• Configuration data: the ranking strategies, pins, schedules, and other settings you create within Siftori.
• Audit logs: snapshots of product order before and after a sort run, so you can review what changed.
• Technical data: server logs (request paths, timestamps, error traces) used for operating and debugging the Service.

Siftori is intended for merchants, not their end customers. We do not collect data about your store's shoppers.

2. How we use information

We use the data above to:

• Authenticate your Shopify store and authorize API calls.
• Compute and apply product sort orders according to your configuration.
• Provide audit history and previews of sort changes.
• Monitor, debug, and improve the Service.
• Communicate with you about the Service when necessary.

3. Legal basis

Under the GDPR, we process this data based on the contract between you and us (providing the Service you installed) and our legitimate interest in operating and securing the Service.

4. Sharing

We do not sell your data. We share data only with infrastructure providers required to run the Service:

• Shopify: the source and destination of all store data.
• Microsoft Azure: hosting for the application, database, and scheduled jobs.

We may also disclose data when required by law.

5. Retention

We retain your configuration, audit logs, and store data for as long as Siftori is installed on your store. When you uninstall the app, Shopify notifies us and we delete your data within 30 days, except where retention is required by law.

6. Security

We use industry-standard measures to protect your data, including encrypted transport (HTTPS), encrypted storage, and access controls. No system is perfectly secure; if a breach affects your data, we will notify you in accordance with applicable law.

7. Your rights

If you are in the EU/EEA or UK, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact us at support@siftori.com. You may also lodge a complaint with your local data protection authority.

8. International transfers

Kamko BV is established in Belgium, but our hosting and Shopify both process data in the United States. Personal data is therefore transferred from the EU/EEA to the United States. We rely on the EU-U.S. Data Privacy Framework where our sub-processor is certified (currently Microsoft Azure), and on the European Commission's Standard Contractual Clauses otherwise (currently Shopify, and as a fallback for Microsoft Azure). The detailed transfer assessment and supplementary measures are set out in the Data Protection Agreement.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or by email.

10. Contact

Kamko BV
Email: support@siftori.com