Privacy Policy

Hakwork (app.hakwork.com) · Last updated: July 14, 2026

Hakwork is a service that syncs product data from a merchant's Zoho Inventory account to their Shopify store. This policy explains what data we handle, why, and what happens to it. We have tried to keep it short and honest.

What we collect and store

• Account information — your company name, the email addresses of the users you create, and passwords (stored only as salted cryptographic hashes, never in plain text).
• Integration credentials — the OAuth tokens and API credentials needed to access your Zoho Inventory organization and your Shopify store on your behalf. These are stored in our database and used solely to perform the syncs you request.
• Product data — items, SKUs, prices, stock-related figures, and custom field values from your Zoho account and Shopify store, cached temporarily to compute differences and run syncs.
• Operational records — sync history, generated reports, and login events (including IP address and browser information) for security and support.

What we do not collect

Hakwork does not access or store any personal data about your store's shoppers. We hold no customer names, addresses, emails, orders, or payment information belonging to the people who buy from your store. Our Shopify access is limited to product, inventory, and location data.

How we use data

Only to provide the service: creating and updating products, syncing prices and fields, generating the reports you run, and keeping your account secure. We do not sell data, share it with advertisers, or use it for any purpose beyond operating Hakwork.

Where data lives

Hakwork runs on Railway (cloud hosting, United States) with network services provided by Cloudflare. Data moves between our servers and the Zoho and Shopify APIs over encrypted (HTTPS/TLS) connections, acting on your instructions.

Data retention and deletion

• Your data is retained while your account is active.
• If you uninstall the Hakwork app from your Shopify store, Shopify sends us a deletion notice about 48 hours later; we then erase that store's access credentials and cached product data.
• You can request full deletion of your account and all associated data at any time by emailing us (address below).

Privacy law compliance (GDPR and similar)

We implement Shopify's mandatory privacy webhooks. If a shopper exercises their right to access or erase their personal data, Shopify notifies us automatically — and because we store no shopper data, there is nothing to disclose or erase; we acknowledge each request. Store-level deletion requests are honored as described above.

Security

All traffic is encrypted in transit. Passwords are hashed, sessions are cryptographically signed, and incoming Shopify webhooks are verified against forged signatures before being acted on. Access to production systems is limited to the operator of the service.

Changes

If this policy changes materially, we will update this page and the date at the top. Continued use of the service after changes constitutes acceptance.

Contact

Questions, data requests, or deletion requests: support@hakwork.com