Privacy Policy

Effective date: September 13, 2026

MyRetailBridge is owned and operated by RetailMatchMaker ("we," "us," "our"). This policy explains what data MyRetailBridge processes when a merchant connects their Lightspeed X-Series and Shopify accounts, why, and how long we keep it.

1. What we process, and why

MyRetailBridge's only function is keeping product and inventory data synchronized between a merchant's Lightspeed X-Series and Shopify accounts. To do that, we process:

• Product data: SKUs, titles, descriptions, prices, images, and stock quantities.
• Order data: order line items (SKU and quantity) and totals, used only to keep inventory counts accurate.
• Account data: your name and email (for login), and your store's platform connection details.

We do not request access to your customers' names, email addresses, phone numbers, or shipping/billing addresses. Order data we process is limited to line items and totals — the fields our sync engine actually needs to reconcile stock counts, not information that identifies your customers.

2. Data we don't touch

We never access, process, or store payment card information — Stripe handles all billing directly, and card data never passes through our systems. We do not sell personal data to anyone, and we do not use any data we process for marketing, advertising, or automated decisions that would have a legal or significant effect on you or your customers.

3. How we store and protect data

• All data in transit is encrypted (HTTPS/TLS) — between your browser, our servers, and Lightspeed/Shopify.
• All data at rest is encrypted at the database infrastructure level.
• OAuth access tokens for your connected platforms get an additional, separate layer of encryption before storage, using a dedicated encryption key that never leaves our database's secure key vault.
• Your data is isolated from every other merchant's at the database level — our system enforces this on every single query, not just in application code.

4. Data retention

Raw webhook notifications received from your connected platforms are automatically and permanently deleted after 30 days. Your product, inventory, and sync history data is retained for as long as your account is active, so you have a working history of what synced and when; you can request deletion at any time (see Section 5).

5. Your rights

Depending on where you're located, you may have the right to access, correct, export, or request deletion of your personal data, to object to or restrict certain processing, and to withdraw consent where processing depends on it. This includes rights available under the EU/UK General Data Protection Regulation (GDPR) and similar laws elsewhere. To exercise any of these rights, email us at match@retailmatchmaker.com. We'll respond within 30 days. For GDPR-specific detail (legal basis, international transfers, data protection contact), see our GDPR page.

5a. Cookies

We use strictly necessary cookies to keep you logged in, and Google Analytics cookies to understand how visitors use our website and app (pages viewed, approximate location, device type). We don't use advertising cookies. See our Cookie Policy for the full list.

6. Third parties

We share data only with the services required to run MyRetailBridge itself: our database/authentication provider, our hosting provider, Google Analytics (website usage statistics), and — once you connect them — Lightspeed and Shopify's own APIs, which you've separately authorized. We do not share your data with any other third party.

7. Changes to this policy

If we make a material change to this policy, we'll update the effective date above and, where required, notify you directly.

8. Contact

Questions about this policy or your data: match@retailmatchmaker.com.