Privacy Policy
Mecaparts is an auto parts management app that integrates TecDoc data and vehicle compatibility features into Shopify stores, enabling merchants to easily manage and publish auto parts. This Privacy Policy explains how we collect, use, and share your personal information when you use our services.
Mecaparts ("we," "us," or "our") respects your privacy and is committed to protecting any personal information you provide when using our Shopify app and related services.
1. Information We Collect
1.1 Personal Information
We only collect personal information when you contact us or use our services in a way that requires authentication and identification. This may include:
- Your name, email address, and contact information
- Your Shopify store URL and other relevant store details
- TecDoc API key and provider ID (if using the Basic Plan)
- Billing and shipping addresses
- Payment credentials (handled via PCI-DSS compliant processors)
1.2 Technical Data
- Product interaction data (articles, categories, manufacturers)
- IP address and device information
- Browser type and version
- Usage patterns via Google Analytics (GA4)
- Shopify integration data (store activity, installation, API calls)
1.3 Cookies and Similar Technologies
We use cookies and similar tracking technologies to:
- Maintain session information and store user preferences
- Analyze app usage and improve performance
- Integrate third-party analytics (e.g., Google Analytics) for insights
You can control how cookies are used through your browser or device settings. Disabling cookies may affect certain features of our app.
2. Legal Bases for Processing (GDPR)
If you reside or operate within the European Economic Area (EEA), we process your personal information only when we have a legal basis to do so, including:
- Contract Performance: To provide our services as agreed with you (e.g., managing auto parts in Shopify)
- Legitimate Interests: To improve our services, maintain security, or engage in reasonable marketing, unless overridden by your data protection interests or rights
- Consent: Where you have given explicit consent for a specific purpose, such as sending marketing emails
- Legal Obligation: To comply with legal requirements, such as financial reporting
3. How We Use Your Information
- Service Provision: Ensure proper functioning of Mecaparts, including article management, vehicle compatibility, and TecDoc integration
- Customization: Tailor our services to your store’s language, country, and configuration settings
- Improvement: Analyze and improve Mecaparts’ features, performance, and user experience
- Communication: Contact you regarding updates, technical support, and critical notifications
We will not sell, lease, or rent your personal data to third parties for marketing purposes.
4. Data Sharing and Third Parties
- Third-Party Service Providers: We may share your information with trusted service providers who help us operate our business, such as hosting companies, analytics providers, and technical support firms. These providers are bound by contractual obligations to protect your data and may only use it for the services we request.
- Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
- Business Partners: We work with TecAlliance (TecDoc) under a Data Processing Agreement to deliver relevant automotive data to our users.
- Business Transactions: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to a third party as part of that transaction.
5. Data Security
We implement commercially reasonable security measures to safeguard your data, including:
- Encryption at rest and in transit (e.g., HTTPS)
- Secure server and data storage systems
- Access controls and least-privilege principles
- Regular security assessments and patches
- Industry best practices for software development
While we strive to protect your personal information, no method of online data transmission or storage is 100% secure. We cannot guarantee absolute security, but we make every effort to keep your data safe.
6. Data Retention
We retain your personal data only as long as necessary to provide our services or as required by law. If you request account closure or deletion of your data, we will delete or anonymize your information, unless we are legally required to retain certain information for compliance or legitimate business interests.
7. Children’s Privacy
Mecaparts is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information about a child, please contact us, and we will promptly delete such data.
8. Your Rights
Depending on your jurisdiction, you have certain rights over your personal information. These may include:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request that we correct inaccuracies in your personal data
- Deletion: Request deletion of your personal data when it’s no longer needed or if the processing is unlawful
- Objection: Object to or request restriction of processing of your personal data (GDPR/CCPA)
- Portability: Receive your personal data in a structured, commonly used format
- Withdraw Consent: Where we rely on your consent, you can withdraw it at any time
To exercise your rights, please contact us using the details in the Contact Us section below. We will respond to your request within a reasonable timeframe.
9. CCPA – California Residents
If you are a California resident, you have specific additional rights under the California Consumer Privacy Act (CCPA):
- Access to Specific Information: Request the specific personal information we’ve collected about you
- Deletion Rights: Request deletion of personal information, subject to certain exceptions
- Non-Discrimination: We will not discriminate against you for exercising any CCPA rights
To make a CCPA request, contact us using the information below in the Contact Us section.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the bottom of this page. Your continued use of Mecaparts after we post any modifications to this Privacy Policy will constitute your acknowledgment of those changes and your consent to abide and be bound by the updated Policy.
12. Data Breach Notification
In the event of a data breach, Mecaparts will take immediate action to mitigate risks and notify affected users as required by applicable laws.
- Identify and assess the nature and scope of the breach.
- Contain and remediate vulnerabilities to prevent further unauthorized access.
- Notify affected users via email or in-app alerts if their personal data is impacted.
- Report the incident to regulatory authorities if legally required.
- Implement corrective actions to strengthen security and prevent recurrence.
13. International Data Transfers
Mecaparts operates globally, and your personal data may be stored or processed in data centers outside your country, including in the United States and Europe.
If your data is transferred outside the European Economic Area (EEA), we implement appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs) as approved by the European Commission.
- Binding corporate rules or equivalent legal frameworks.
- Technical and organizational measures to ensure data protection.
14. Automated Decision-Making & Profiling
Mecaparts does not engage in automated decision-making that produces legal or similarly significant effects on users.
However, we may use automated systems for:
- Personalized product recommendations based on your previous searches.
- Detection of fraudulent activities and security threats.
- Improvement of app features through aggregated usage analytics.
If you object to any form of automated processing, you may contact us at apps@mecazon.com.
Effective Date: March 2, 2025
© 2025 Mecaparts. All rights reserved.
