Privacy Policy

Last updated: August 3, 2026

Sogrep is an inventory-sync service that keeps a seller's stock levels consistent across the online stores and marketplaces they sell on. This policy explains what information we collect when you use Sogrep, how we use and protect it, and the choices you have. It applies to the Sogrep application and the sogrep.com and alanicole.com websites.

1. Information we collect

We collect only what we need to run the sync service for you:

• Account & contact data — the account identifier, name, and email address you use to sign in and receive support.
• Billing data — subscription plan and billing status. Card payments are handled by our payment processor; we do not receive or store your full card number (see below).
• Your product catalog — the SKUs, product titles, quantities, and prices you add or import to manage as your master inventory.
• Store connection settings — the sales channels you connect, their configuration, the OAuth/API credentials that authorize the connection (stored encrypted — see Security), and the exact listing IDs you map a product to on each channel.
• Order & sync data — from the stores you connect, we receive order/sale notifications and read the line items needed to adjust stock (SKU, quantity sold, and an order reference), plus the webhook and sync evidence we keep to confirm a sync ran correctly.
• Support & audit data — messages you send us, and operational audit records of connector and inventory actions taken on your account.

2. Information we don't collect

Sogrep syncs inventory quantities, not buyers. When we process an order or receipt from a connected channel, we use only the SKU, quantity, and an order reference required to decrement your stock.

• We do not need or retain buyer personal information — names, shipping addresses, or contact details from your customers' orders.
• We do not receive or store payment-card numbers or bank-account details. Card processing is handled entirely by our payment processor.

3. How we use information

• Operate the service — keep your inventory in sync and help prevent overselling across connected channels.
• Maintain and verify connector health, and troubleshoot sync issues.
• Process your subscription and billing.
• Provide support and keep the audit records that show what actions were taken on your account.
• Secure the service and meet legal, tax, and accounting obligations.

We do not sell your personal information, and we do not use it for advertising.

4. Connected sales channels

You choose which channels to connect (for example Shopify, WooCommerce, Etsy, and eBay). When you authorize a channel, Sogrep exchanges data with that channel's API on your behalf — reading order and listing/inventory information and writing the quantity updates you've approved. Your data on each channel remains governed by that channel's own terms and privacy policy.

Where a channel's API sets data-handling rules, we follow them. For the Etsy API, this includes honoring Etsy's API caching limits (we retain Etsy listing data no longer than Etsy permits and only as needed to perform a sync), authorizing with OAuth 2.0 (PKCE) for member data, and not scraping or reselling Etsy data.

5. How we share information

We share information only with the service providers that help us operate Sogrep, each limited to what they need for their function:

• Google Cloud Platform — hosting, database (Firestore), logging, and key management for the application.
• Stripe — subscription billing and payment processing. Stripe receives your payment details directly; Sogrep does not store your card number.
• Resend — delivery of transactional email to you, such as sync-health alerts, onboarding messages, and support acknowledgements. These messages contain your own store and channel names only; they carry no buyer data.
• Anthropic — if you use our optional AI-assisted support, a redacted support context may be processed to generate a response. Secrets and sensitive values are stripped before any such call.
• The sales channels you connect — Shopify, WooCommerce, Etsy, eBay, and any other channel you authorize, for the connection workflows above.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and service. If Sogrep is involved in a merger or acquisition, we will notify you before your information becomes subject to a different privacy policy.

6. How we protect information

• Credential encryption — the OAuth tokens and API credentials for your connected stores are encrypted at rest using Google Cloud KMS envelope encryption. Application secrets are held in Google Secret Manager.
• Encryption in transit — all traffic to and from Sogrep and the channel APIs uses HTTPS/TLS.
• Tenant isolation — each customer's data is scoped to their own account.
• Access control — administrative access is restricted to an allowlisted operator and is audited.

No online service can guarantee absolute security, but we work to protect your information using the measures above.

7. Retention & deletion

We keep your information while your account is active and for as long as needed to provide the service, meet legal, tax, billing, and support obligations, and maintain audit records. When you close your account or ask us to delete your data, we honor verified deletion requests — including removing your connected-store credentials — unless a legal, billing, or support hold requires us to retain specific records for longer.

Order data has a firm limit. After 12 months we automatically remove the order reference from the sync records we keep, and delete the order-processing entries that carry it. Your stock history — what sold, how many, and when — stays intact, but what remains can no longer be traced back to one of your customers.

8. Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to disconnect any connected store at any time from within Sogrep. To make a request, email us at support@sogrep.com. We will verify your request and respond as required by applicable law. Sogrep is intended for business users aged 18 or older and is not directed to children.

9. Changes to this policy

We may update this policy as the service evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Continued use of Sogrep after an update means you accept the revised policy.

10. Contact us

Questions about this policy or your data? Email us at support@sogrep.com and we'll help.

11. Trademarks & attributions

The term "Etsy" is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

Shopify is a trademark of Shopify Inc., WooCommerce is a trademark of Automattic Inc., and eBay is a trademark of eBay Inc. Sogrep is an independent service and is not endorsed by, certified by, or affiliated with any of these companies. All other trademarks are the property of their respective owners.