1. Scope
This policy applies to data used to establish store connections, configure and perform migrations, record migration activity, validate results, and provide migration-related support. It does not replace the Data Policy, which governs broader personal information and privacy rights.
2. Data Collected for Migration
Depending on the Migration Path and connection method, Next-Cart may collect or receive Source Store and Target Store URLs, API credentials or access tokens provided for authentication and data retrieval, uploaded data files when file-based migration is used, connection information required for an approved Source Store or Target Store, migration configuration and selected options, and other technical information reasonably required to perform the purchased Migration Service.
For open-source platforms, a store connection may require a connection component or authorized server access. For cloud platforms, API credentials or authorized application access may be required. For file-based migrations, the customer provides the relevant data files.
3. Migration Activity and Metadata Stored
Next-Cart may store migration-related metadata such as Source Store and Target Store URLs, identifiers of source and target records used to track migration relationships, migration configuration and selected options, migration dates and activity history, and service usage information needed to operate the migration, including information used to determine whether counted records have already been recorded under the applicable Service License.
The contents of records being migrated are processed as necessary to transfer data between the Source Store and Target Store. Next-Cart does not treat the migration process as a permanent backup service for the customer's store data.
4. Data Collected for Support
When technical support or Custom Migration review is requested, Next-Cart may ask for information reasonably required to reproduce, investigate, or resolve the issue, including store URLs, site administrator access, authorized hosting or server access where needed, API credentials or access tokens when API access is required, uploaded files or sample exports, representative record identifiers, screenshots, logs, or other technical evidence relevant to the reported issue.
Customers should provide only the access and data necessary for the requested support task and should avoid sharing unnecessary payment information, passwords, secret keys, or unrelated personal data.
5. How Next-Cart Uses Migration Data
Next-Cart uses migration-related data to connect to the Source Store and Target Store, configure and execute the requested migration, preserve supported relationships between migrated records, calculate and manage Entity Points usage and Service License activity, validate migration results, investigate reported issues, provide technical support and approved Custom Migration work, and resolve service-related disputes or quality issues.
Next-Cart does not use store migration data for unrelated purposes outside the Service except as described in the Data Policy or required by law.
6. Access and Security
Next-Cart uses technical and organizational measures intended to protect migration-related information from unauthorized access, loss, misuse, or disclosure. Access to migration and support data is limited to personnel and systems that require it to provide or support the Service.
Connection credentials and other sensitive access information should be used only for the purpose for which they were provided. Customers should revoke, rotate, or change temporary access credentials after migration or support access is no longer required.
7. Data Sharing
Next-Cart does not disclose customer migration data to third parties for unrelated purposes. Data may be handled by infrastructure, payment, communication, or other service providers where necessary to operate Next-Cart services, and may be disclosed when authorized by the customer or required by applicable law. Any such handling is subject to the applicable Data Policy and contractual or legal safeguards.
8. Retention and Deletion
Migration metadata, configuration, support evidence, and access information may be retained only for as long as reasonably necessary to provide the Service, support the applicable Service License, maintain migration continuity, address disputes, meet security requirements, or comply with legal obligations. Specific retention periods may differ by data type and system.
Where deletion is requested and applicable, Next-Cart will process the request according to the Data Policy, applicable law, and any technical or legal retention requirements.
9. Data Protection Rights
Where applicable under law and the Data Policy, customers may have rights to request access to personal data, request erasure, restrict certain processing, or request data portability.
10. Customer Responsibilities and Security Recommendations
Customers are responsible for ensuring they are authorized to provide store data and credentials to Next-Cart. To reduce security risk after migration or support work is complete, customers should remove temporary connection components that are no longer required, revoke or delete API credentials or tokens created for migration, change temporary hosting or administrator credentials, remove temporary support accounts that are no longer required, and maintain appropriate backups and security controls for both Source Store and Target Store.
11. Data Incidents and Access Concerns
If a customer believes migration access information has been compromised or data has been exposed unexpectedly, the customer should contact Next-Cart promptly through the support or contact channels so the issue can be assessed and appropriate action can be taken.
12. Contact
For questions about this Data Policy or requests relating to migration data, use the support, contact, or privacy channels available on the Next-Cart Website.
