Privacy policy: Inventory Sync for Loyverse

Last updated: 13 November 2026

This policy explains what data the Wix app “Inventory Sync for Loyverse” (the app), published by Kayabyte, the trading name of Caner Kaya, Stasjonsveien 64, 0771 Oslo, Norway (we, us), processes when it is installed on a Wix site. It adds to the privacy policy for Kayabyte apps for Wix, which also applies. The app works with Loyverse but is not affiliated with or endorsed by Loyverse.

What the app does

The app keeps stock (and, when the site owner turns it on, prices) in sync between the site’s Wix Stores catalog and one store in the site owner’s Loyverse account, and can create products on either side when the owner asks it to.

Roles

The site owner is the controller for the data in their Wix site and Loyverse account. Kayabyte acts as a processor that handles the data only to run the sync the owner set up. Wix.com Ltd. hosts the site and the app’s dashboard page. Loyverse provides the Loyverse account and its APIs. Cloudflare, Inc. hosts the app’s sync service and its storage (Cloudflare Workers and Durable Objects) and is a sub-processor.

Data the app reads

• From Wix: products and variants (IDs, names, SKUs, prices, option names), stock counts at the store’s default location, the site’s currency and catalog version, and the site’s plan for the app.
• From Loyverse, for the connected account: the merchant ID, business name and currency, the stores (IDs and names), items and variants (IDs, names, SKUs, prices, stock tracking settings, image links when importing) and stock counts for the chosen store.
• The app does not read receipts, orders, customers, employees, payments or any shopper data on either side.

Data the app stores

• The Loyverse connection: the merchant ID, business name, currency, chosen store, and the access and refresh tokens, encrypted (AES-GCM) and never shown in the dashboard.
• Links between Wix variants and Loyverse variants: item and variant IDs, names, SKUs and the last seen stock counts and prices.
• The last read of both catalogs (IDs, names, SKUs, prices) for the lists in the dashboard.
• An activity log of the latest 300 sync events (time, item name, what changed).
• Short-lived records to prevent handling the same notification twice (3 days) and sign-in states (10 minutes).

Retention and deletion

Disconnecting Loyverse deletes the access tokens at once; the links, catalog read and activity log are kept so that reconnecting the same Loyverse account continues where it stopped, until the app is removed or you ask us to delete them. When the app is removed from the site, syncing stops and the tokens are deleted; everything stored for the site is deleted 30 days later (a reinstall within those 30 days keeps the links). Site owners can ask for earlier deletion at support@kayabyte.dev.

Logs

The sync service writes technical log lines (the app instance ID, the request path, the outcome and error codes). Logs contain no customer data and are kept by Cloudflare for a short time. Install, removal and plan events that Wix sends the app, with the app instance ID, are also copied to Kayabyte’s private usage statistics, together with a note (app instance ID only) the first time a site connects Loyverse, so we can see how many sites use the app.

Plans and payments

Paid plans are sold and billed by Wix. We never receive card details.

Cookies, tracking and third parties

The app sets no cookies on the site and uses no analytics, advertising or tracking services. The Loyverse sign-in step sets one short-lived cookie (10 minutes) on till-sync.kayabyte.dev that ties the sign-in to the browser that started it. No data is shared with third parties other than Wix, Loyverse and Cloudflare, as described above.

Your rights and contact

For questions about this policy, or to exercise your rights under the GDPR, contact our data protection contact at support@kayabyte.dev.

Changes

We will update this page if the app’s data handling changes. The date at the top shows the latest version.