Shelfwright privacy policy

Information the App reads

With your permission, granted when you install the App, it reads through Shopify's API:

• Products and variants: title, variant name, SKU, barcodes, price, compare-at price and vendor, to put them on your labels. They are read when you print and are not saved.
• Purchase orders, inventory transfers and shipments: line items and their quantities, supplier name and destination name, to decide how many labels to print. They are read when you print and are not saved.
• Your store's currency and shop ID, to format prices and to check your plan.
• Only if you turn on "Assign missing barcodes" and approve the extra permission: write access to product barcodes, used to fill in empty barcode fields. Existing barcodes are never changed.

What the App does not access

The App does not request access to customers, orders, or payment information, and it collects no personal information about your customers. It uses no advertising, analytics, or tracking cookies, and no third-party trackers.

Information the App stores

Label PDF and ZPL files are generated in memory and sent straight to your browser. We do not keep copies.

• Your shop's domain and the access token Shopify issues to the App, so it can work for your store.
• The number of labels printed per month, used for plan limits. No product details are kept with it.
• Label designs you save: size, which fields to show, font sizes and any custom text you type.
• Short-term service logs (request time, shop domain and error messages) for security and debugging.

How information is used and shared

We use this information only to provide, secure and support the App. We do not sell or rent it, use it for advertising, or share it with data brokers.

It is processed only by Shopify, as the platform the App runs on, and by Amazon Web Services (Lightsail, United States), which hosts the App and its database. We disclose information to authorities only when the law requires it.

Retention and deletion

• When you uninstall the App, your shop's session and access token are deleted immediately.
• When Shopify sends the shop/redact request (48 hours after uninstall), we delete everything else stored for your shop, including saved label designs and label counts.
• The App stores no customer data, so customers/data_request and customers/redact requests have nothing to export or delete; we acknowledge them to Shopify.
• You can delete saved designs in the App at any time.

Security

All traffic uses HTTPS. Every request from the Shopify admin is verified with Shopify session tokens, and every webhook with its HMAC signature. The database is not reachable from the internet.

Your rights

Depending on where you live (for example under the GDPR or the CCPA/CPRA), you may have the right to access, correct, delete or export your data, and to object to certain processing. To use these rights, email shelfwright.support@gmail.com. If you are in the EEA or UK, you may also complain to your local data protection authority.

Changes

If this policy changes materially, we will update the date above and tell you in the App.

Contact

For privacy questions, email shelfwright.support@gmail.com.