Operations Suite processes store data only to provide merchant-requested workflows, operate the service, provide support, and meet legal and security obligations.
Information we process
- Shop and account information: Shopify shop domain, user identifiers, name, email, locale, installed access scopes, authentication sessions, and app preferences.
- Commerce data: orders, fulfillment details, products, variants, inventory items, locations, tags, notes, prices, product statuses, draft-order details, and payment-status information needed for the selected tool.
- Uploaded and generated data: CSV filenames and submitted rows, validation messages, operation status, Shopify responses, result exports, usage counts, and operation history.
- Support data: contact name, email, shop domain, support message, replies, ticket status, assignment, category, and internal troubleshooting notes.
- Technical information: limited request, error, and security information needed to keep the service reliable and prevent misuse.
How we use information
We use information to:
- authenticate Shopify users and provide Operations Suite;
- validate, preview, and run merchant-requested bulk operations;
- show operation history, results, and downloadable exports;
- apply plan access and 30-day operation limits;
- deliver, assign, investigate, and answer support requests;
- diagnose errors, secure the service, and prevent abuse; and
- comply with Shopify requirements and applicable law.
We do not sell personal information, use it for behavioural advertising, or use store data to market unrelated products.
Service providers and disclosures
Information is disclosed only when needed to operate the app. Shopify provides authentication, store APIs, and subscription billing; Cloudflare provides application hosting and database infrastructure; and Resend provides support-email delivery. These providers process information under their own terms and security commitments.
We may also disclose information when required by law, to protect legal rights or service security, or during a business transfer subject to appropriate safeguards.
Retention and deletion
- Row-level operation results and uploaded filenames: up to 90 days.
- Aggregate operation records without CSV row data: up to 12 months.
- Completed or closed support tickets: up to 24 months.
- Expired authentication sessions: removed after 30 days.
Shopify sends mandatory privacy webhooks when customer data must be redacted and after a shop uninstalls the app. Operations Suite uses verified requests to remove the relevant customer records or shop-linked data from its active database. Limited records may be kept longer only where reasonably required for security, dispute resolution, fraud prevention, or a legal obligation.
Security and international processing
Access to the embedded app is authenticated through Shopify. Internal support access is restricted by verified Shopify identity and assigned permissions. Data is transmitted over encrypted connections and production data is stored on Cloudflare infrastructure with encryption at rest.
Service providers may process information outside the merchant's country under their safeguards and applicable law. No internet service can guarantee absolute security.
Merchant and customer choices
Merchants can review app access in Shopify, manage or cancel a paid plan through Shopify, and uninstall the app to revoke future access. A merchant or customer may request access, correction, or deletion of personal information by contacting us. We may need the shop domain and reasonable information to verify and route a request.
Changes to this policy
We may update this policy when the app, our providers, or legal requirements change. The date above identifies the latest version. Material changes will be communicated through an appropriate channel.
Contact
For privacy questions or requests, create a support ticket and choose the most relevant topic. Include your Shopify shop domain and never send passwords, access tokens, payment-card information, or unrelated customer data.