Privacy Policy — ClickUp Sync

Last updated: July 2026

ClickUp Sync ("the App") is operated by Corventia ("we", "us"). The App connects a Shopify store with a ClickUp workspace to create and update tasks from orders. This policy describes what data the App processes and why.

What data we process

• Order data: order number, line items, totals, order status, sales channel, customer name and shipping address — received from Shopify via webhooks and used solely to create and update the corresponding task in the ClickUp list you choose.
• Store data: your store domain and the App configuration (chosen list, filters, sync rules).
• ClickUp credentials: the OAuth access token you authorize, stored encrypted (AES-256-GCM) and used only to act on the list you selected.

We do not process customer emails, phone numbers or payment details. We do not sell data, and we do not share it with third parties beyond the transfer to ClickUp that the App exists to perform.

Where data goes

Order details are sent to ClickUp (clickup.com) to create tasks in the workspace you connected. ClickUp's own privacy policy applies to data stored there.

Retention and deletion

• Sync metadata (order-to-task links, sync logs) is retained while the App is installed.
• On uninstall, ClickUp credentials are revoked immediately, and store data is deleted in line with Shopify's mandatory data-erasure webhooks (shop/redact, 48 hours after uninstall).
• Customer-level redaction requests (customers/redact) remove all traces of the affected orders from our systems.
• Data-access requests (customers/data_request) are honored within 30 days via the contact below.

Security

Data is transmitted over TLS. Third-party tokens are encrypted at rest. Access to production systems is restricted to the operator.

Contact

Questions or requests: support@corventia.com