Privacy Policy
Version 2026-08-14 · Effective August 14, 2026
This policy explains what data OhoSync collects, why we collect it, and the choices you have. We keep it plain. If anything is unclear, contact us.
OhoSync is a product operated by Monine AS, a company registered in Norway (“we”, “us”), providing a service that syncs supplier product feeds into e-commerce stores. We act as a data processor for the store and product data you bring to us, and as a controller for your account information. We are committed to handling that data responsibly and in line with the GDPR and applicable data-protection laws.
1. Information we collect
- Account data — your name, email and password (stored hashed), and billing details where applicable.
- Store & feed data — connection tokens and the product, price, stock and image data you sync. We process this on your behalf.
- Usage data — log and device information used to operate, secure and improve the service.
2. How we use data
We use your data to provide and maintain the service, run syncs, process payments, provide support, keep the platform secure, and communicate important updates. We do not sell your personal data, and we do not use your store or product data to train models without your explicit consent.
3. Sub-processors
These are every third party that can touch data we hold on your behalf, what they do, and where they process it. This list is the current one — it is not "available on request", because a list you have to ask for is a list you cannot check.
| Sub-processor | What it does | Where it processes |
|---|---|---|
| Hetzner Online GmbH | Hosting: the application, its database and its backups | Helsinki, Finland (EU) |
| Stripe, Inc. | Payment processing for paid plans | EU and United States |
| Resend (Plus Five Five, Inc.) | Transactional email — verification, password reset, sync notices | EU region (Ireland); delivery via Amazon SES in the same region |
| Cloudflare, Inc. | Authoritative DNS for ohosync.com | United States (company), global network |
| Google Ireland Limited | Google Analytics 4 — website statistics, only after you accept cookies | EU and United States |
| AI provider (reserved) | Not yet active on our own account. AI-assisted features (see the AI Terms) run through this row only once a platform-side provider is switched on — named here, and in the Data Processing Addendum, before it processes anything of yours. A tenant supplying its own provider key contracts with that provider directly; it is not our sub-processor in that case. | Not yet active |
Your own shop — WooCommerce or Shopify — is not a sub-processor. It is your system, and OhoSync writes to it on your instruction using credentials you issue and can revoke.
4. Data retention
We keep your data for as long as your account is active. When you close your account, we delete or anonymise your personal data within 30 days, except where we must retain limited records for legal, accounting or fraud-prevention purposes.
5. Security
Data is encrypted in transit (TLS) and at rest. Store connections use scoped, revocable tokens — we never store your store admin password. We apply least-privilege access controls and monitor for unauthorised activity.
6. Your rights
Depending on your location, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these, contact us and we'll respond within the timeframe required by law.
7. Contact
Questions about this policy or your data? Email hello@ovanap.no or use our contact page.
Terms of Service AI Terms Copyright Policy Refund Policy Cookie Policy