Sealply helps Shopify merchants meet EU packaging law (PPWR): it builds Declarations of Conformity, tracks substance attestations, and prepares packaging-quantity reports. This policy explains what data the app handles.
Store data: your store's domain and a Shopify access token, required to read your products.
Merchant-entered business data: your economic-operator identity (legal name, business address, contact) and your packaging bill of materials (component materials, weights, and substance attestations). This information exists to produce your compliance documents.
We do not collect or process your customers' personal data. Sealply never sees shopper names, addresses, emails, orders, or payment information. We use no advertising trackers and no third-party analytics.
Data is hosted on Vercel (application) and Neon (database), encrypted in transit (TLS) and at rest. To send you the one-time welcome email and account-security alerts, your contact email and store name are shared with our email provider, Resend. Our subprocessors are Vercel Inc., Neon Inc., Shopify Inc., and Resend, Inc.
When you uninstall Sealply, your access token is invalidated immediately and all stored shop data is permanently deleted no later than 48 hours after Shopify's shop/redact notice. You may also request deletion at any time at the email below. We honor all of Shopify's mandatory GDPR webhooks.
Under the GDPR and similar laws you may request access, correction, or erasure of data we hold for your store. Contact support@sealply.com — we respond within 30 days.
We will post any changes to this policy on this page with an updated effective date.
Questions: support@sealply.com