Trust & security
Security at Zync
We treat your store and accounting data with care. Here's how.
Authentication
- OAuth everywhere — Shopify and Zoho are connected via OAuth. We never see or store your Zoho password.
- Token rotation — Zoho access tokens are refreshed automatically and Shopify offline tokens use expiring access with rotation.
- Least-privilege scopes — the App requests only the Shopify scopes required for the syncs you enable.
Data handling
- Access tokens are stored securely and used only to call the APIs.
- Sync runs as isolated, queued jobs with full audit logging.
- We do not sell data or use it for advertising.
Privacy compliance
- We implement Shopify's mandatory GDPR webhooks:
customers/data_request,customers/redact, andshop/redact. - Data is removed on uninstall and on verified deletion requests.
Reporting an issue
Found a vulnerability? Please email support@techspawn.com with details. We investigate every report.