Privacy Policy

Last updated: June 25, 2026

This Privacy Policy explains how Store Backup ("Store Backup", "we", "us") collects, uses, stores, and protects information when a merchant installs and uses the Store Backup application for BigCommerce (the "Service"). Store Backup is operated by Store Backup & Restore, Geary St STE 1500, San Francisco.

Information we process

To provide backup and restore, the Service processes the following:

Store data you ask us to protect. Versioned copies of your products and images, categories, brands, customers, price lists, orders, pages, 301 redirects, and themes, retrieved from your store through the BigCommerce API.
Store and account identifiers. Your store hash, the OAuth access token issued by BigCommerce (stored encrypted), the granted scopes, and the email addresses of users who open the app.
Billing information. Your subscription plan and a count of your monthly orders, used to determine your tier. Card details are handled directly by our payment processor (Stripe); we do not store card numbers.
Support communications. Messages you send us (for example through the contact form or by email) and the email address you reply from.

How we use this information

To run automatic and on-demand backups of your store, and to restore data when you ask.
To operate your subscription and bill the correct plan based on your order volume.
To provide support and respond to your requests.
To keep the Service secure and to comply with our legal obligations.

We do not sell your data, and we do not use your store data for advertising.

Storage and security

Your BigCommerce access token is encrypted at rest.
Backups are stored on dedicated cloud object storage and are isolated per store: each store's data is kept under its own namespace, with no cross-store access.
We only write to your store when you ask us to restore something. Existing orders are never changed; if you choose to restore a deleted order, we recreate it as a new order.

Data retention and deletion

Backup history is retained for 365 days (a full year) on every plan. Older backups are automatically pruned.
Uninstalling the app stops all backups and billing. We keep your backups for 30 days in case you reinstall; after that, all of your stored data - backups, files, and the email addresses of the users who opened the app - is permanently deleted.
You can request deletion of your data at any time by contacting us at support@expert-ecom.com.

Sub-processors

We rely on the following providers to deliver the Service:

BigCommerce - the platform your store runs on (source of the data we back up).
Cloudflare R2 - encrypted cloud object storage for your backups.
Stripe - payment processing for subscriptions.

International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@expert-ecom.com. Because the data we hold belongs to your store, requests from your store's authorized users are honored directly.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide notice through the app or by email.

Contact

Questions about this policy or your data? Email us at support@expert-ecom.com.