Privacy Policy

Last updated: 30 July 2026

This policy covers Fielded (“the app,” “we,” “us”), a Shopify app that syncs order and customer data from a merchant's Shopify store into that merchant's own HubSpot account. It's operated by Elias Gouatarbès, a Finland-based light entrepreneur (kevytyrittäjä) trading as Fielded. You can reach us at elias.gouatarbes@gmail.com.

If you're a merchant using Fielded, this policy explains what we do with your store's data and your own account details. If you're a customer of a store that uses Fielded, this policy explains what happens to your personal data when it passes through our systems on its way from that store to the merchant's CRM.

1. What we do, in one paragraph

When a customer places an order in a merchant's Shopify store, Fielded reads that order (and the customer's contact details) and creates or updates a matching record in the merchant's own HubSpot account. That's the entire function of the service. We don't operate a shared database of shoppers across different stores, we don't use this data for advertising, we don't sell it, and we don't use it to train any model or for any purpose beyond performing this sync.

2. Our role: who controls this data, and who processes it

For any merchant using Fielded, the merchant is the data controller of their own customers' information — they decide to collect it (via their Shopify store) and they decide to install Fielded to move it into HubSpot. We act as a data processor, handling that data only on the merchant's instructions and only to perform the sync. Our Data Processing Agreement governs this relationship in more detail.

3. What data we handle

Sourced from a merchant's Shopify store, for each order or customer that syncs:

Name, email address, and phone number
Shipping and billing address
Order details: products purchased, quantities, prices, currency, payment and fulfillment status

This data is written into the merchant's own HubSpot account as Contacts and Deals. We also separately hold, about the merchant's connection to the service (not their customers):

Their Shopify store domain
Encrypted access tokens for their Shopify store and HubSpot account (see Section 6)
Their chosen HubSpot pipeline, stage, and routing preferences
A one-way cryptographic hash of their dashboard access key — the key itself is shown to them once and is never stored in a form we can read back
Their store's contact email address, used only to reach the merchant directly about their account (e.g. a required reconnection or a service issue) — never for marketing

4. Why we process this data

Primarily to perform the service the merchant installed Fielded for: syncing their store's orders and customers into their HubSpot account, and letting them monitor and configure that sync. We also use the merchant's own contact email (Section 3) for operational communication about their account — the legal basis for that is our legitimate interest in being able to reach a merchant about their own service. The legal basis for the rest is performance of our contract with the merchant (and, in turn, the merchant's own basis for processing their customers' data under their store's terms and privacy policy).

5. Who else sees this data

We use a small number of infrastructure providers to run the service. None of them can use this data for their own purposes — they process it only to provide hosting/infrastructure to us.

Provider	Purpose	Location
Render	Hosts the running application	EU (Frankfurt)
Supabase	Hosts our database	EU (Ireland)
Shopify	The merchant's own store platform	Per Shopify's own policies
HubSpot	The merchant's own CRM — the destination of the sync	Per HubSpot's own policies

We do not sell personal data, share it with data brokers, or share it across different merchants' accounts. Each merchant's data goes only into that merchant's own HubSpot account.

6. How we protect this data

Shopify and HubSpot access tokens are encrypted at rest (AES-256-GCM); the encryption key is held separately from the database itself.
All connections to our database are encrypted in transit and verified against a pinned certificate.
Every inbound webhook is cryptographically verified before we act on it, so we only ever process data that genuinely originated from Shopify.
Dashboard access keys are stored only as one-way hashes — not even we can recover a lost key; a merchant who loses theirs has to reconnect their HubSpot account to get a new one.

7. How long we keep it

Connection details (Section 3's second list) are kept for as long as the merchant has Fielded installed, and deleted automatically within 48 hours of the app being uninstalled.
Sync activity logs (a record of what synced and whether it succeeded, not full order contents) are kept for 90 days and then automatically and permanently deleted.
Beyond that, this app does not retain customer order/contact data itself — once synced, that data lives in the merchant's own HubSpot account, governed by their own retention choices there.

8. Your rights, and how to exercise them

If you're a merchant: contact us at elias.gouatarbes@gmail.com to access, correct, export, or delete the connection data described in Section 3. Uninstalling the app also deletes it automatically.

If you're a customer of a store using Fielded: because the merchant controls this data, requests about your personal information should generally go to that merchant first. We also support Shopify's own data-request and data-deletion mechanisms directly: a request routed to us through Shopify to delete your data removes our records of it; a merchant's own uninstall removes everything we hold for that store within 48 hours. Depending on where you live, you may also have rights under laws such as the GDPR (EU/UK), including access, correction, deletion, restriction, portability, and objection.

9. Children's data

Fielded is a business tool used by merchants and is not directed at children. We don't knowingly process data belonging to children beyond whatever incidental data a merchant's own customers may include in an order.

10. International transfers

Our infrastructure runs entirely within the EU (application hosting in Frankfurt, Germany; database hosting in Ireland). Shopify and HubSpot are independent controllers/processors of their own and may process data in other locations under their own respective privacy policies.

11. Changes to this policy

If this policy changes in a material way, we'll update the date at the top of this page. Continued use of Fielded after a change means you accept the update.

12. Contact

Questions about this policy, or about your data: elias.gouatarbes@gmail.com