AYBABTU Privacy Policy

Last updated: October 24, 2026

AYBABTU, operated by Epic Force LLC, synchronizes SanMar inventory and prices with WooCommerce stores through AYBABTU Sync, our WordPress plugin, and provides SanMar inventory, pricing, and ordering through the AYBABTU API. Shopify support is coming soon.

Information we collect

We process your Shopify store domain and store metadata, WooCommerce store URL and plugin settings, product and variant inventory metadata, optional prices, stock quantities, backorder settings, the _aybabtu_supplier flag, and operational inventory-sync telemetry logs. Telemetry is retained for 90 days and the dashboard exposes a rolling 30-day window. AYBABTU does not request or retain Shopify customer personal data or order IDs.

WooCommerce plugin

The AYBABTU Sync plugin adds a native settings page in wp-admin and links to the separate AYBABTU dashboard. It can optionally show a storefront badge link, which is off by default. WooCommerce REST consumer keys and secrets are stored encrypted at rest before persistence. The service processes product SKUs, stock quantities, backorder settings, optional prices, and the _aybabtu_supplier product flag as needed to keep the store in sync.

Developer portal

The developer portal processes account email addresses, passkey/WebAuthn public credentials, API keys, and usage logs used to operate the portal and API access. At signup, AYBABTU stores optional first-touch UTM campaign fields, the referring page host and path without its query string, the landing path, and an optional answer about how the user heard about AYBABTU. AYBABTU records account funnel milestones such as signup, store connection, first sync, trial, payment, and first order for aggregate administrator reporting. Funnel event metadata does not contain payer email addresses.

EU customers and data processing

EU customers are welcome. We act as a processor for your store data, and a Data Processing Agreement (DPA) is available on request for Enterprise customers. See this Privacy Policy's list of sub-processors.

SanMar and third-party services

SanMar credentials stored in the vault are encrypted before persistence. SanMar inventory requests use the public inventory API when requested. WooCommerce store orders can become SanMar purchase orders through the AYBABTU dashboard, with review and approval before sending. Public API order creation is available when SanMar ordering is enabled.

Analytics

We use PostHog to understand how the site is used; typed information is masked in session recordings.

Credential security

Vendor passwords and credentials are encrypted at rest using AES token encryption and are never written to telemetry logs or API responses.

Sub-processors

DigitalOcean hosts the application runtime. PostgreSQL stores durable tenant configuration and telemetry. Redis temporarily stores queue, quota, and cache state. PayPal processes PayPal payments. Alchemy processes crypto webhook lookups and settlement events.

How long we retain data

Operational sync logs are retained for up to 90 days. The dashboard displays a rolling 30-day telemetry window. Merchants may request deletion of stored merchant data by contacting [email protected].

How we use and share data

We use data only to provide, operate, troubleshoot, and improve inventory synchronization and account services. We do not sell merchant data. Data is shared with Shopify, WooCommerce, SanMar, PayPal, crypto payment infrastructure, and other configured service providers only as needed to deliver the requested service.

Your choices

The verified Shopify shop/redact webhook deletes the store's durable PostgreSQL tenant data, including sync logs and webhook-delivery records. App uninstallation deactivates the store. Merchants may request deletion of retained data through support, subject to records we must retain by law. See our Terms of Service for billing and usage details.

Payments

Paid plans can be purchased with PayPal or with supported cryptocurrency in the developer portal. PayPal processes PayPal payments. For crypto checkout, wallet addresses and transaction hashes are recorded on the public blockchain.

Contact email: [email protected]