Privacy policy
Last updated: 26 October 2026
This policy explains what personal data Storeloom collects when you use our website (store-loom.com) and the Storeloom app (app.store-loom.com), why we collect it, who we share it with, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
1. Who we are
The data controller is:
- Company name: BERGER Solutions SRL
- Address: str. Narciselor, nr. 13, Sangeorgiu de Mures, jud. Mures, Romania
- CUI: RO35380271
- Email: contact@store-loom.com
2. What we collect
Your account
When you sign up we store your email address, your name, and your password (hashed; we can't read it). If you sign in with Google, Google tells us your email address and name; we don't get your Google password.
Your stores
When you connect a WooCommerce store, we store:
- the store's address and name;
- the WooCommerce API keys you approve, encrypted;
- a copy of the store's product catalogue (products and variations with their names, SKUs, prices, stock, categories, tags, descriptions and similar product fields), so you can browse and edit it quickly;
- the changes you save through Storeloom, with the values before and after, so you can review and undo them;
- your saved grid views and your settings for each store.
Storeloom reads and edits products only. It doesn't access your store's orders, customers or their personal data. Product data normally isn't personal data. If you put personal data into product fields, we process it only to show and save it for you.
Subscription and payment
Payments are handled by Freemius (see section 4). We don't receive or store your card details. Freemius tells us your plan, your trial and renewal dates, and whether your subscription is active, linked to your email address.
Technical data
Our servers process your IP address and browser details to deliver the website and app and to keep them secure (for example, against attacks on sign-in). We don't use analytics, advertising or tracking tools, and we don't build profiles of you.
3. Why we use it, and on what legal basis
- To provide Storeloom: your account, connecting and syncing your stores, editing and saving your products, and change history. Legal basis: performing our contract with you (GDPR Art. 6(1)(b)).
- To manage your subscription: checking your plan and trial, and showing your billing status. Legal basis: contract (Art. 6(1)(b)).
- To email you about your account: confirming your email address, password resets, and important changes to the service or these terms. We don't send marketing emails. Legal basis: contract (Art. 6(1)(b)).
- To keep Storeloom secure and working: preventing abuse, fixing errors, and backups. Legal basis: our legitimate interest in a secure, reliable service (Art. 6(1)(f)).
- To meet legal obligations, such as accounting and tax rules. Legal basis: legal obligation (Art. 6(1)(c)).
4. Who we share it with
We don't sell your data. We share it only with the service providers we need to run Storeloom:
- Hetzner Online GmbH (Germany): hosts our servers, database and backups in data centres in the European Union.
- Freemius, Inc. (United States): sells Storeloom subscriptions as our reseller and merchant of record. It processes your payment, billing details and invoices, and handles sales tax and VAT. Freemius processes this data under its own privacy policy.
- Resend, Inc. (United States): sends our account emails, such as email confirmation and password resets.
- Google: only if you choose to sign in with Google.
- Your own stores: Storeloom sends the changes you save to the stores you connected.
Where a provider processes data outside the European Economic Area, the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. We may also disclose data when the law requires it.
5. How long we keep it
- Your account and store data: for as long as you have an account. If your subscription ends, we keep your data so you can pick up where you left off; you can delete it at any time.
- When you delete your account (Settings → Delete account), we immediately delete your account, your sign-in, your stores' API keys, their cached products, your change history and saved views. Copies in our backups are overwritten within 14 days.
- Billing records: kept as long as accounting and tax law requires (in Romania, generally 10 years).
- Server logs: kept for a short time for security and troubleshooting, then deleted automatically.
6. Cookies and browser storage
We use only what's needed for Storeloom to work, so no consent banner is needed: a session cookie that keeps you signed in, and storage in your browser for a copy of your product catalogue (so the grid loads fast) and your preferences, such as the store you last opened. There are no advertising or analytics cookies. Signing out ends your session; clearing your browser's site data removes the rest.
7. Security
Everything travels over encrypted connections (HTTPS). Your stores' API keys are encrypted in our database, our servers are firewalled and kept up to date, and only we have access to them. No method of transmission or storage is completely secure, but we work to protect your data with appropriate technical and organisational measures.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy of it;
- correct inaccurate data (you can change your name and email yourself in Settings);
- have your data deleted (you can delete your account yourself in Settings);
- restrict or object to processing based on our legitimate interests;
- receive your data in a portable format (you can also export your products from the grid at any time).
To use any of these rights, email contact@store-loom.com. We reply within one month. You also have the right to complain to a data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro), or the authority where you live or work.
9. Children
Storeloom is a tool for businesses and isn't meant for anyone under 18. We don't knowingly collect data from children.
10. Changes to this policy
If we change this policy, we'll update the date at the top. If a change materially affects how we use your data, we'll tell you by email before it takes effect.
11. Contact
Questions about this policy or your data: contact@store-loom.com, or by post to BERGER Solutions SRL, str. Narciselor, nr. 13, Sangeorgiu de Mures, jud. Mures, Romania.