1. Who we are
unSquared is built and operated by Helios Technology Solutions Inc. ("Helios," "we," "us"). This policy explains what information unSquared collects when a Shopify merchant installs and uses it, and how that information is handled.
2. Information we collect
From your Shopify store: your shop domain, your store's name, the contact email Shopify holds for your store, your Shopify access token (used to act on your store), and - if you use an online session - your staff account's name, email, and locale from Shopify's own login screen. The store contact email is used once, on first install, to pre-fill your notification address, and the store name and domain are shown in the emails we send you.
From your Square account: a Square access token obtained through Square's own secure login process, the business name and merchant ID of the Square account you connect (so we can show you which account is connected), plus whatever Square data you choose to migrate - product catalog details, customer records, gift card balances, discounts, collections, and URL redirect mappings.
Migrated customer information: when you migrate Customers, unSquared reads the customer fields Square provides - name, email, phone number, company name, and address - and creates matching records in your Shopify store. A summary of each migrated customer (name, email, phone, and migration status) is also kept in your migration report and history inside unSquared, so you have a record of exactly what happened on that run.
Your settings: the notification email you provide, and the field-mapping, taxonomy, and migration preferences you configure. None of this is shared with or sold to anyone.
Support requests: when you use Contact Support, we collect the name and email address you enter, the topic you choose, your message, and an optional migration Job ID. We keep each request with a reference number so you can see it in Settings and so we can respond to you. So that you don't have to repeat yourself, the copy of your request that our support team receives also includes a summary of your account, put together when you send it: your store name and domain; your plan and when it was paid for; which migrations you have run, how the latest ones went (including the first few error messages, which can mention the record involved) and the job you referenced; your Square business name, merchant ID and when it was connected; what you chose to migrate; your notification settings and pending scheduled migrations; the delivery status of recent emails; and your earlier support requests. Only our support team sees this summary. It is not saved with your request or shown in the confirmation email you receive, and it never includes your Square or Shopify access tokens.
Email and technical records: a record of the emails we send you (the recipient address, the subject, and whether it was sent), and technical logs of what the app did - for example that an email was sent to an address, or that a migration failed - which we keep for a limited period for troubleshooting.
3. How we use information
We use this information to operate unSquared: to connect to your Square and Shopify accounts, run the migrations you configure, generate your downloadable reports and migration history, send you the service emails described in Section 7, and respond if you contact support. We don't use your data for advertising, and we don't sell or rent it to third parties.
4. How we secure it
Square and Shopify access tokens are encrypted at rest using AES-256-GCM before they're stored - not saved in plain text. Access to your data is limited to what unSquared's own services need to perform the migrations you request.
If a data breach occurs that's likely to put your rights or your data at risk, we'll notify you without undue delay, and no later than 72 hours after we become aware of it.
5. Third parties we work with
unSquared necessarily shares data with Square and Shopify themselves, since moving data between them is the entire purpose of the app - each platform receives only what's required to complete the actions you request through its own API. unSquared's infrastructure runs on standard cloud hosting and database providers to store the information described in Section 2. We don't use third-party advertising or analytics trackers on this website or inside the app, and we don't set any tracking or advertising cookies. The only cookie involved anywhere in unSquared is the essential session cookie Shopify's own embedded app login requires to keep you signed in - that one isn't optional, since the app can't function without it, and it's set by Shopify's login flow, not by us.
Email delivery: to send the emails described in Section 7, unSquared uses Helios's own email service, which delivers mail through Mailgun, a transactional email provider. When an email is sent, that provider receives the recipient address, the subject and body (which can include your store's name and domain, your Square business name and merchant ID, migration totals and, for a support request, the message you wrote and the account summary described in Section 2), and a tag identifying your shop. It uses this only to deliver the message, and keeps delivery records for a limited period set by that provider. It may process this information outside your country.
6. Data retention and deletion
If you uninstall unSquared, your saved Square connection and Shopify session are deleted immediately, and any in-progress migration is stopped. Your migration history, reports, and settings are then kept for a grace period - currently about 9 days from when Shopify notifies us of the uninstall - specifically so that if you uninstalled by accident, reinstalling within that window keeps your migration history, reports and notification settings (you'll still need to reconnect Square, and because uninstalling resets your purchase, you'll be asked to approve the plan charge again). If the app isn't reinstalled within that window, everything described in Section 2 is permanently deleted, in line with Shopify's own data protection requirements for apps. That includes your support requests and our record of the emails we sent you. Emails that were already delivered stay in the mailboxes they were sent to, and our email provider and our technical logs keep their own records for a limited period, after which they expire.
You can request deletion of your shop's data sooner, at any time, by contacting helpdesk@heliotech.ca. Because migrated customer records live in your own Shopify store once a migration runs, requests from your end customers about their own data should go through your store directly for anything Shopify holds. unSquared also keeps a smaller copy of basic details (name, email, phone, and migration status) in its own migration reports and history, as described in Section 2 - if you need that copy removed for a specific customer sooner than the uninstall timeline above, contact helpdesk@heliotech.ca and we'll remove it manually.
7. Email notifications
unSquared sends emails to you, the merchant, at the notification address you save in Settings. On first install that address is pre-filled with your Shopify store's contact email, and you can change it at any time. There are two kinds.
Optional emails: migration started, paused, cancelled, completed, or errored; a re-sync summary; a Square API health alert; and a scheduled-migration reminder. They're off by default, and you choose which ones to receive in Settings. A notification address is required once any of them is turned on.
Service emails you can't switch off: that unSquared was installed or uninstalled, that your Square account was disconnected, that you marked your migration complete, that your migration selection was saved, and notices that a migration type has been temporarily switched off. Some include a summary of what unSquared migrated for your store. They relate to your account and your use of the app, contain no advertising, and are sent only while a notification address is saved.
Support: when you send a request through Contact Support, we email it to our support team with your address as the reply-to, together with the account summary described in Section 2, and send you a confirmation copy (without that summary), with your reference number, at the address you entered in the form (which may differ from your notification address). We aim to reply by email within 24 to 48 hours.
Every email includes your store's name and domain and, if Square is connected, your Square business name and merchant ID, so you can tell which account it is about. unSquared never emails your end customers directly. (A linked gift card can trigger Shopify's own standard gift-card notification email to that customer - that's Shopify's platform behavior, not something unSquared sends.)
8. Your rights
Depending on where you're located, you may have the right to: access the information we hold about your shop; correct it if it's inaccurate; request its erasure; restrict or object to certain processing; and receive a copy of it in a portable format. You can exercise any of these directly through the app's own Settings for most things, or by contacting helpdesk@heliotech.ca for anything else. See Section 6 for how deletion works in practice.
If you believe we haven't handled your data properly, you also have the right to lodge a complaint with your local data protection authority - we'd appreciate the chance to make it right first, but that right is yours regardless.
9. Children's privacy
unSquared is a business tool for Shopify merchants and isn't directed at children. We don't knowingly collect information from anyone under 18.
10. Changes to this policy
We may update this policy as unSquared evolves, and review it at least once a year regardless of whether anything has changed. If we make a material change, we'll update the effective date at the top of this page.
11. Contact us
Questions about this policy, or requests relating to your data, can be sent to helpdesk@heliotech.ca.