Trust & security
What the Mecaparts app can access, where it runs, and who operates it. Plain facts, no badges we haven't earned.
Principles
Least privilege
The app asks Shopify only for what it needs to manage your catalogue. No access to customers or orders.
Your licence, your data
TecDoc data comes through your own TecAlliance credentials. We don't resell it or pool it across stores.
Transparent operations
Public status page, public changelog, public documentation.
What the app can access
These are the exact Shopify access scopes requested at install. You can review them on Shopify's install screen.
| Scope | Why |
|---|---|
| read_products · write_products | Create and update the parts you import, with fitment metafields. |
| read_inventory · write_inventory | Keep stock quantities in sync. |
| read_locations | Know which locations hold stock. |
| read_files · write_files | Upload product images and documents from TecDoc. |
| read_publications · write_publications | Publish products to your sales channels. |
| write_app_proxy | Serve the vehicle search inside your storefront. |
Not requested: customers, orders, checkouts, payments, staff accounts.
Hosting & infrastructure
- Shopify appDistributed through the Shopify App Store
- App servers & databaseFly.io, Paris region, European Union
- Websitemecaparts.app is hosted by Vercel
- TransportHTTPS enforced on every request
- AuthenticationShopify OAuth; sessions are scoped to your shop
- CredentialsTecDoc provider ID and API key stay on the server, never sent to the browser
- BillingHandled by Shopify; we never see card details
- AvailabilityMonitored on our public status page
Your data
- Product dataLives in your Shopify store as products and metafields
- App settingsShop domain, language, country, enabled vehicle searches, TecDoc provider ID and API key
- Account dataName and email of the staff member who opens the app, from Shopify
- Import historyFiles you import and their results, so you can follow and fix imports
- Privacy requestsSubscribed to Shopify's mandatory privacy webhooks (customer data request, customer redact, shop redact)
- Your rightsAccess, correction and deletion on request, under applicable data protection laws
Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Shopify | App distribution, authentication (OAuth), billing | Canada / global |
| Fly.io | App servers and database | Paris region (EU) |
| Vercel | Website hosting | United States, global network |
| Email (Google Workspace) | United States, Ireland | |
| TecAlliance | TecDoc catalogue data, through your own licence | Germany |
| Instatus | Public status page | — |
Company & legal
- OperatorWZM Technologies EURL
- Contactcontact@mecaparts.app
- Governing lawLaw and courts of the publisher’s registered office
- DocumentsLegal notice · Privacy policy · Terms