Privacy Policy

Last updated: October 19, 2026

This privacy notice describes how InfoHub Works Limited (“we”, “us”), company number 11499103, handles personal information for EShopSet. Our registered office is 124 City Road, London, England, EC1V 2NX. This notice explains how we handle personal information when you use the EShopSet hosted service at https://app.eshopset.com, the EShopSet Shopify app, and the website at https://eshopset.com. EShopSet is subscription software. You get an account and a workspace, connect Shopify stores, and pay per store through Shopify.

Questions, access requests, and deletion requests: [email protected].

Who this notice covers

It covers visitors to eshopset.com, people with an EShopSet account, people invited into a workspace, and Shopify stores connected to a subscription. It is the privacy policy for the EShopSet application, operated by InfoHub Works Limited.

Two kinds of information

Account data is information we use to run the hosted service: your profile, sign-in, workspace membership, plan and seat use, support messages, and use of the public website. We decide the purposes for this data.

Store data is information from a Shopify store you connect, a spreadsheet you select, and content you ask the service to draft or publish. You decide the purposes for this data. We host and process it only to provide the subscription you bought. You are responsible for having a lawful basis to share your customers’ information with EShopSet.

Account data

When you create an account or are invited to a workspace, we collect the details needed to run the service:

name, email address, and, if you sign in with Google, the Google profile described below
workspace membership and the role you have there
settings you save, and usage counted against your plan (such as seats, sync rows, and tokens)
messages you send to [email protected]

If you submit a form on eshopset.com, we collect the name, email address, and message you enter. HubSpot processes those form submissions for us. HubSpot’s privacy policy is at https://legal.hubspot.com/privacy-policy.

Store data from Shopify

When you install EShopSet or connect a store, the service requests access to Shopify Admin data for that store:

products and variants, so the apps can read your catalog and so Data Sync can create, update, or archive products you configure
inventory levels and locations, so Data Sync can read stock and set quantities at a location you choose
orders and customer profiles, so workspace features that need them can run for the store you connected

Data Sync writes only the product and inventory fields you map. Billing for the subscription is handled by Shopify and appears on your Shopify invoice.

Information you enter

You may paste Search Console figures into CopilotPost, or upload a Search Console queries CSV into Link Pilot. Those values come from you. EShopSet does not connect to Google Search Console. You may also save app settings, column mappings, and content you ask CopilotPost or Link Pilot to work with.

Your customers

If your store grants access to orders or customer profiles, EShopSet can receive those records. We use them only to provide the subscription on that store. EShopSet does not place its own cookies on your storefront, and it does not use your customers’ information for advertising.

You can ask us what customer information we hold, or ask us to delete it, by emailing [email protected]. Include the store domain and enough detail for us to find the records.

Google user data we access

EShopSet accesses Google user data only when you choose Google to sign in, or when you connect a Google account in Data Sync. We request only the permissions that feature needs.

Google sign-in

If you sign in with Google, EShopSet accesses:

your Google account email address
your name
your profile picture
your Google account identifier

We use this account data to create your EShopSet account, sign you in, and show your name in the service. We store the OAuth tokens Google returns for that sign-in so the login stays linked to your account.

Google Sheets in Data Sync

If you connect Google in Data Sync, you grant per-file access: EShopSet can see, and the permission also allows edit, create, and delete, only for the specific Google Drive files you use with the app (https://www.googleapis.com/auth/drive.file). EShopSet can access a file only after you select it with the Google file picker. EShopSet does not access the rest of your Google Drive.

From a spreadsheet you select, EShopSet accesses:

the spreadsheet title and worksheet names
the cell values in the worksheet and columns you map for a sync
the email address, name, and profile picture of the Google account you connected, so we can label which account is connected
an OAuth access token and a refresh token, so a sync you schedule can run after you close the browser

EShopSet reads that spreadsheet in order to sync your catalog. It does not keep a full copy of the spreadsheet, and it does not browse or modify other files in your Drive. EShopSet does not connect to Gmail, Google Calendar, or Google Contacts.

How we use information

We use account data and store data to provide, secure, and support the hosted service you subscribe to:

to create and sign in your account, and to show the workspace to the people you invite
to run the apps you enable, including SEO Performance Monitor, AI Presence, Data Sync, Link Pilot, and CopilotPost
to count usage against the plan on each store
to preview and apply catalog changes you configure
to produce a draft when you ask CopilotPost to draft one, and to publish content when you ask the service to publish it
to diagnose failed jobs and protect the service from abuse

We do not sell personal information. We do not use store data or your customers’ information for our own advertising.

How we use Google user data

We use Google user data to provide the features you turn on: Google sign-in, and reading the spreadsheet you selected so Data Sync can preview and apply product changes in the Shopify store you connected. We also keep the column mapping, the last values applied to products this app has synced, and a limited sample of recent changes and errors, so a later sync can tell what changed and so you can review the run.

EShopSet uses Google user data only to provide or improve user-facing features of EShopSet that you request. We do not use Google user data for targeted advertising, personalized advertising, retargeted advertising, interest-based advertising, or user advertisements. We do not sell Google user data. We do not provide it to data brokers or information resellers. We do not use it to determine creditworthiness or for lending. We do not use Google user data to create an independent database for those purposes.

EShopSet does not use Google user data from Google APIs, including Google Workspace APIs such as Google Sheets and Google Drive, to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.

EShopSet’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share information with

We share information with service providers that host and operate the subscription, and only as needed to provide it:

Hosting. Providers that run the EShopSet application and database process account data and store data on our instructions.
Shopify. Mapped product and inventory fields are written to the store you connected. Shopify also collects subscription fees and shows them on your Shopify invoice.
HubSpot. Website form submissions are processed so we can reply to you.
People in your workspace. Users you invite can see the stores, settings, and logs their role allows.
An AI agent you connect. If you connect a compatible agent through EShopSet AI Power, that agent can read the store information you authorize. This happens because you connected the agent, and only to provide that feature.
Draft generation. When you ask CopilotPost for a draft, the text needed to produce that draft may be sent to an AI provider for that request only. We do not send Google user data to an AI provider to train generalized or non-personalized models.

We do not transfer or disclose Google user data to third parties for purposes other than providing or improving the EShopSet features you use. We do not transfer Google user data for advertising, sale to data brokers or information resellers, creditworthiness, lending, or training generalized or non-personalized AI or machine learning models.

We may disclose information if the law requires it, or to protect the rights, safety, and security of EShopSet, our customers, or the public.

Where information is processed

EShopSet is a hosted service. Account data and store data may be processed in the countries where our hosting providers operate, which can be outside your country and outside the European Economic Area. We use those providers to run the service.

How long we keep information, and how to delete it

We keep personal information for as long as needed to provide the subscription, comply with law, resolve disputes, and enforce our agreements. When that period ends, we delete or destroy it.

Account data is kept while your workspace exists. Google sign-in tokens are kept while that login stays linked, and are deleted when the account is deleted.
Data Sync tokens and the connected Google account email are kept until you disconnect that Google account in Data Sync, or until the workspace is deleted. Disconnecting deletes the stored tokens.
Sync records for a store — the column mapping, the last values applied, and a limited sample of recent changes and errors — are kept while that store’s Data Sync installation exists.
Store data for a Shopify store is deleted within 30 days after you uninstall EShopSet from that store, unless the law requires us to keep it longer. You can also email [email protected] to ask us to delete it sooner.
Website form submissions are kept long enough to handle your request and our related records.

You can revoke EShopSet’s access to your Google account at any time at https://myaccount.google.com/permissions. After Google rejects the stored token, scheduled syncs stop until you connect again.

You may request access to or correction of your personal information by emailing [email protected]. Some records may remain in backups until those backups expire.

How we protect information

Security procedures are in place to protect the confidentiality of your data. We use encryption in transit (HTTPS/TLS) between your browser, EShopSet, Google, and Shopify. OAuth tokens are stored in the EShopSet database and are used only to perform the sign-in or the sync you configured. Access to that database is limited to the systems that run the service.

Data Sync uses per-file Google Drive access. Until you pick a spreadsheet, the app cannot read your Drive files. The token handed to the file picker is short-lived and can open only files you choose in that picker.

Cookies on the website

eshopset.com stores your cookie choice in your browser. The site loads Google Tag Manager, which may set analytics cookies and receive technical data such as your IP address, browser type, and pages viewed. You can control cookies in your browser. The hosted app uses a sign-in cookie so you stay logged in.

Changes

If we change how EShopSet accesses, uses, stores, or shares personal information or Google user data, we will update this page and the date at the top. Where a change materially affects Google user data, we will also notify account holders by email or in the service where we can reach them.

Contact

InfoHub Works Limited
Company number 11499103
Registered office address: 124 City Road, London, England, EC1V 2NX
EShopSet
https://eshopset.com
[email protected]