Privacy Policy

Migrastore is the controller of your personal data. For any questions about personal data, contact ciao@migrastore.it.

We process three types of data:

• Contact details you provide (migration funnel): name, email, phone, and your store URL.
• Store access credentials you provide for migration (source store API keys and destination Shopify store token), stored encrypted at rest (AES-256-GCM).
• Data from stores being migrated, which may include your customers' personal data (names, addresses, customer and order emails). Here we act as a processor — you are the controller for that data (see section 6).

• Responding to requests and providing quotes — basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Performing the migration and support — basis: contract performance (Art. 6(1)(b)).
• Legal obligations (invoicing, accounting) — basis: compliance with a legal obligation (Art. 6(1)(c)).
• Service communications — basis: legitimate interest (Art. 6(1)(f)).

We use subprocessors to deliver the service, all with appropriate safeguards: infrastructure and database hosting, Stripe (payments), Clerk (authentication), Resend (email delivery), Shopify (destination platform), and Sentry (error monitoring). We do not sell personal data to third parties.

Some of these providers may process data outside the EU; in those cases we ensure lawful transfer mechanisms (e.g. standard contractual clauses).

• Store credentials: deleted after the migration and free re-sync period are complete, or earlier on your request.
• Leads/contacts: up to 24 months without interaction, unless converted to a customer.
• Billing data: for the applicable legal retention period in Portugal.

When we migrate your store, we process your customers' data on your behalf and according to your instructions, only to transfer it to your new store. We do not use it for any other purpose. The free demo migrates products only — never customer or order data.

You have the right to access, rectify, erase, restrict, and object to processing, as well as data portability. To exercise them, write to ciao@migrastore.it. You also have the right to lodge a complaint with a supervisory authority (Comissão Nacional de Proteção de Dados — CNPD in Portugal).

We use only cookies strictly necessary for the website and authenticated area to function (e.g. login session). We do not use advertising cookies.

We may update this policy. The date of the last revision is at the top. For material changes, we will notify you through our usual channels.