Privacy policy
Effective from 1 September 2026
Who we are
The add-ons are operated by Apptiary s.r.o., Tylova 1043/15, 831 04 Bratislava, Slovakia, Company ID 57 466 408 ("we"). Contact: info@apptiary.com.
Whose data we process
E-shop operators (our customers) and their contact persons.
End customers of the e-shop (buyers) – solely within the scope of data the CMS sends us in an order notification, and only for the purpose of triggering the notification. Here we act as a processor for the e-shop operator.
What data and why
E-shop operators: the e-shop identifier and URL, a contact e-mail (service notices, for example that a channel stopped working), CMS API access credentials provided by the CMS, the channel settings you enter (webhook addresses, chat identifiers, recipient e-mail addresses, your e-mail service API key), and notification delivery records (time, event type, order number, result).
Buyers: from the order notification we process the order number, total amount and currency, item count, payment and shipping method, status and payment flag. The buyer’s first and last name appears in the message text only if you explicitly enable it for the given channel; even then we do not store it. Other data (address, e-mail, phone, items) is removed immediately after processing.
Legal basis: performance of the contract with you (Art. 6(1)(b) GDPR); for operational and security records our legitimate interest (Art. 6(1)(f) GDPR).
Where and for how long
Data is stored in the EU (Hetzner Online GmbH, Helsinki data centre, Finland). Access tokens and channel settings are encrypted in the database (AES-256-GCM). Communication is HTTPS-only; notifications from the CMS are verified by signature.
The technical envelope of a received event (event, e-shop and order identifiers) is kept for 7 days to protect against duplicate processing. Notification delivery records for 30 days. After uninstalling the add-on we stop notifications immediately and delete all e-shop data within 30 days.
Who we share data with
We send notifications exclusively to the services you choose and manage (Slack, Discord, Telegram, Microsoft Teams, Google Chat, Google Sheets, ntfy, your e-mail service, your webhook). You are responsible for the terms of these services as their user.
Other processors: Hetzner Online GmbH (hosting, EU), Functional Software, Inc. – Sentry (error tracking, EU region, no personal data). We do not provide or sell data to anyone else.
Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection. Write to info@apptiary.com; we will reply within 30 days. You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).
Cookies and analytics
Without your consent this site stores no cookies at all. Basic visit counts come from Cloudflare Web Analytics, which uses no cookies and collects no personal data. Your language choice and your consent decision are kept in the browser’s localStorage, not in a cookie.
If you consent, Google Analytics 4 is loaded (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Only then do the cookies _ga and _ga_YXH2886BKQ, both lasting 2 years, reach your browser to tell a returning visit apart, and only then is the visited address, the referring page, the device and browser type, an approximate location and a truncated IP address sent to Google. The purpose is to learn which pages are useful; the legal basis is your consent (GDPR art. 6(1)(a)). The data may also be processed in the US under the adequacy decision (EU–US Data Privacy Framework) and standard contractual clauses.
You can withdraw your consent at any time through the “Cookies” link in the page footer. Measurement stops immediately and its cookies are removed. Declining changes nothing about how the site works.
The add-on settings inside the CMS administration use only the technical session data necessary for signing in, and contain no analytics of any kind.