Privacy policy: Inventory Sync for Zettle

Last updated: 13 November 2026

This policy explains what data the Wix app “Inventory Sync for Zettle” (the app), published by Kayabyte, the trading name of Caner Kaya, Stasjonsveien 64, 0771 Oslo, Norway (we, us), processes when it is installed on a Wix site. It adds to the privacy policy for Kayabyte apps for Wix, which also applies. Made by Kayabyte. Not affiliated with or endorsed by PayPal or Zettle.

What the app does

The app keeps stock (and, when the site owner turns it on, prices) in sync between the site’s Wix Stores catalog and the product library and default store inventory of the site owner’s Zettle account, and can create products on either side when the owner asks it to.

Roles

The site owner is the controller for the data in their Wix site and Zettle account. Kayabyte acts as a processor that handles the data only to run the sync the owner set up. Wix.com Ltd. hosts the site and the app’s dashboard page. Zettle (PayPal) provides the Zettle account and its APIs. Cloudflare, Inc. hosts the app’s sync service and its storage (Cloudflare Workers and Durable Objects) and is a sub-processor.

Data the app reads

• From Wix: products and variants (IDs, names, SKUs, prices, option names), stock counts at the store’s default location, the site’s currency and catalog version, and the site’s plan for the app.
• From Zettle, for the connected account: the user and organization IDs, the merchant name, currency and VAT rate, the IDs of its stock inventories, products and variants (IDs, names, SKUs, barcodes, prices, options, image links when importing), whether stock tracking is on for each product, and stock counts of the default store inventory.
• The app does not read purchases, receipts, orders, customers, employees, payments or any shopper data on either side.

Data the app stores

• The Zettle connection: the organization ID, merchant name, currency, VAT rate and inventory IDs, and the access and refresh tokens, encrypted and never shown in the dashboard; and the signing key of the app’s Zettle notification subscription, encrypted.
• Links between Wix variants and Zettle variants: product and variant IDs, names, SKUs and the last seen stock counts and prices.
• The last read of both catalogs (IDs, names, SKUs, prices) for the lists in the dashboard.
• An activity log of the latest sync events (time, item name, what changed).
• Short-lived records to prevent handling the same notification twice and sign-in states (10 minutes).
• Stock changes not yet confirmed by Zettle (variant IDs and the change), until they are written.

Retention and deletion

Disconnecting Zettle deletes the site’s access tokens at once and ends the app’s connection to your Zettle account, unless another of your Wix sites still uses it; the links, catalog read and activity log are kept so that reconnecting the same Zettle account continues where it stopped, until the app is removed or you ask us to delete them. When the app is removed from the site, syncing stops and the tokens are deleted; everything stored for the site is deleted 30 days later (a reinstall within those 30 days keeps the links). Site owners can ask for earlier deletion at support@kayabyte.dev.

Logs

The sync service writes technical log lines (the app instance ID, the request path, the outcome and error codes). Logs contain no customer data and are kept by Cloudflare for a short time. Install, removal and plan events that Wix sends the app, with the app instance ID, are also copied to Kayabyte’s private usage statistics, together with a note (app instance ID only) the first time a site connects Zettle, so we can see how many sites use the app.

Plans and payments

Paid plans are sold and billed by Wix. We never receive card details.

Cookies, tracking and third parties

The app sets no cookies on the site and uses no analytics, advertising or tracking services. The Zettle sign-in step sets one short-lived cookie (10 minutes) on the app’s sync service that ties the sign-in to the browser that started it. No data is shared with third parties other than Wix, Zettle and Cloudflare, as described above.

Your rights and contact

For questions about this policy, or to exercise your rights under the GDPR, contact our data protection contact at support@kayabyte.dev.

Changes

We will update this page if the app’s data handling changes. The date at the top shows the latest version.