Privacy policy

What the app does not touch

The app does not read, receive or store any customer data. That includes customers, orders, draft orders, abandoned checkouts, refunds, transactions, shipping and fulfilment records, and gift card recipients.

This is enforced by the permissions the app asks for. It requests access to products and inventory only, so the data above is not available to it even if it tried.

Inside the app there are no analytics or advertising trackers. The app builds no profiles, and never sells or shares data for marketing. Visits to the app's App Store listing page are measured separately - see "Who else is involved".

What the app stores

Your store's myshopify.com domain and the access token Shopify issues when you install the app. The token is what lets the app read and write product data on your behalf.

The rules you create: the values to write, their conditions, the destination metafield, and the settings for each label slot.

Your app preferences: the admin display language and whether gift cards are excluded.

Change history: for each write, the product and variant name, which field was written, and the value before and after. This is what makes a run reversible. The most recent 50 confirmed runs and 49 unconfirmed runs per store are kept — older ones are deleted automatically.

The time each product was last evaluated, used to avoid re-evaluating the same product repeatedly when inventory changes often.

Product data the app reads

To build a preview or apply a run, the app reads products, variants, inventory levels, prices, collections, tags and metafields through Shopify's Admin API.

This data is read for the request that needs it and is not kept afterwards, apart from the change history described above.

When you apply a run, the app writes values to variant metafields in the mm-google-shopping namespace, and — for feed quality fixes — to the barcode and SKU fields you edited. It writes nothing else.

Who else is involved

Shopify, because the app runs inside the Shopify admin and all product data is read from and written to your Shopify store.

Fly.io, which hosts the application server and the database it stores the data above in.

Google Analytics, but only around the app's listing page in the Shopify App Store. That page is served by Shopify, not by the app. Shopify measures visits to it, and when someone installs the app from it, Shopify reports that install together with the store's name, URL and id. It is used to count how many people find the listing and how many of them install. It runs nowhere inside the app, and no product, inventory or customer data is sent to it.

Beyond that, no one. The app sends no data to advertising networks or data brokers.

How long data is kept

Change history rotates automatically at 50 confirmed runs and 49 unconfirmed runs per store.

Uninstalling the app deletes its access to your store immediately. Shopify then notifies the app 48 hours later, at which point every remaining record for your store — rules, history, settings and evaluation times — is deleted.

If you want your data deleted sooner, email us and we will do it.

Security

All traffic to the app is over HTTPS. Access tokens are stored only in the app's own database and are never sent anywhere else.

Shopify issues access tokens that expire and are refreshed automatically, which limits what a leaked token could be used for.

Cookies

The app sets only the session cookies required for Shopify authentication. The app itself sets no analytics or advertising cookies. Cookies on the App Store listing page are set by Shopify and covered by Shopify's own policy.

Your rights

You can ask what the app holds about your store, and ask for it to be corrected or deleted, by emailing the address below. We will respond within 30 days.

Who operates this app

Atsurae is operated by matoix, a sole proprietorship registered in Japan.

Address: Osaka Ekimae Dai-2 Building 12-12, 1-2-2 Umeda, Kita-ku, Osaka 530-0001, Japan.

The operator's personal name is disclosed without delay on request. Email the address below.

Changes to this policy

If this policy changes, this page is updated and the date at the top changes with it.